Re: Steve Bellovin: ssh2 mitm attack?

[Markus Friedl <markus%openbsd.org@localhost>]

On Wed, Jul 31, 2002 at 12:37:06PM -0500, Dave Dykstra wrote:
> I pointed this out on the openssh-unix-dev mailing list in January
>     http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=101069187914700&w=2
> and there was some discussion but Marcus didn't seem to think it was
> worth worrying about.

Well, Markus, and I said that the client should print out the other
keys.  I never finished my initial patch (until recently) because it
was not considered critical (every new hostkey allows MITM) and you
can't do anything in the protocol.