Re: Why SFTP performance sucks, and how to fix it

[Nicolas Williams <Nicolas.Williams%sun.com@localhost>]

[OT]

On Tue, Jul 08, 2003 at 06:13:29PM -0400, Joel N. Weber II wrote:
> Unless you can get into a state where the server thinks that key
> exchange was successful and the client thinks it was unsuccessful, or
> vice versa, I'm not sure why this actually becomes a problem.
> 
> The places key exchange can fail when both sides support the same
> algorithm, assuming the connection doesn't break and you don't have a
> man in the middle:
> 
> 1) GSSAPI failures, which generally are going to happen early in the
>    process, before you successfully transfer your large numbers (since
>    the public diffie-hellman numbers get encrypted with GSSAPI).

I've experienced this one enough times (for a variety of reasons) that
I've wished that the client could then re-try w/o gss keyex.

Cheers,

Nico
--