Re: IESG feedback on core drafts.

[Markus Friedl <markus%openbsd.org@localhost>]

On Fri, Mar 14, 2003 at 09:07:45AM +0000, Simon Tatham wrote:
> Conversely, PK auth doesn't solve your problem if you've never made
> a secure connection to the server before, because your very first
> connection is vulnerable to MITM and so you can't guarantee that
> it's a safe channel through which to copy your public key to the
> server - a hypothetical MITM could rewrite the key on the way past
> and end up giving the server a public key of his own instead of
> yours.

as far as i understand pk auth with ssh v2, i think
that pk auth allows you to detect MITM because in this
case the authentication will always fail (as opposed
to ssh v1). (but i could be too tired to get this right)....

-m