IETF-SSH archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: Transport I-D: KEXINIT reserved field needs description
On Wed, Jul 23, 2003 at 09:57:24AM +0200, Markus Friedl wrote:
> On Tue, Jul 22, 2003 at 03:44:42PM -0700, Nicolas Williams wrote:
> > I think the fact that some implementations do not tolerate KEXINIT
> > "extensions" should not precluse the proposed change. Several
> > implementations already map the peer's version string to compatibility
> > notes and react accordingly. While I hope that we can put stop adding
> > to this database of compatibility notes I think that this particular
> > issue (KEXINIT extensibility) is worth the trouble to fix.
>
> I don't think it's a good idea to break the protocol at
> this point. This compatibility database is always a pain
> and you always miss some implementations.
>
> I think you could only assume that the peer is able to deal with
> the extension if it sends a non-zero value in the reserved field,
> but I doubt this helps for what you want. On the other hand, you
> could send the extension data in an extra packet if the reserved byte
> is not zero.
Of all the things in the compat db, this would be amongst the most
important things to have in there.
So if a peer has a version string that according to the compat db means
that the peer does not support KEXINIT non-zero reserved field, then you
send zero in your KEXINIT's reserved field and no extra data in that
packet. Otherwise you are free to use KEXINIT extensions.
Cheers,
Nico
--
Home |
Main Index |
Thread Index |
Old Index