Re: gss userauth

[Markus Friedl <markus%openbsd.org@localhost>]

On Mon, Aug 25, 2003 at 09:00:54AM -0600, Joseph Galbraith wrote:
> I'm sure I'm being niave (or I just drove all night
> and my brain isn't working correctly yet), but, assuming
> the SSH layer is secure (and if you want to secure the
> SSH layer using gss, you can use the kex method), what
> attack does this prevent?

i don't know GSS API, but for pubkey auth the session id is used
to 'bind' the signature to the connection.