On Thu, Aug 10, 2000 at 11:54:45PM -0400, Charles M. Hannum wrote:
> Uh, let's clear up a few misconceptions here...

ok. then, please, do.

> OpenSSH is not `a complete rewrite' by any stretch.  It uses a large
> amount of code directly from old versions of Tatu's SSH.  Indeed, many
> of the positive changes in OpenSSH since then were not even done by
> the OpenSSH people; they were done by OSSH (which never seems to get
> credited).

could you please enumerate the positive changes?

> It's quite a misnomer, and a severe disservice to the many
> people who have contributed to SSH, to credit it entirely to the
> OpenSSH group.
> 
> Also, let's not forget than OpenSSH brought us the UseLogin hole, and
> that over time the `group that puts out OpenBSD' has been known to
> introduce other holes (as documented on bugtraq in the past).  Let's
> not slobber over it too much without understanding the reality.

Reply via email to