Re: Questions on X11 forwarding

[Nicolas Williams <Nicolas.Williams%sun.com@localhost>]

On Thu, May 22, 2008 at 10:29:19PM +0200, Niels Möller wrote:
> 1. It would make more sense to *not* have any authentication info in
>    this message, and instead put the responsibility of setting up
>    proper authentication on the server. Then one also gets rid of the
>    wart that the cookie must be hex-encoded.

I agree.  And I agree with (2) as well.

> I haven't been active on this list for a while. I remember somebody
> proposing some solution for the second problem. Has there been any
> progress made? Something along the lines of

There's been very little activity on the list.

>       byte      SSH_MSG_CHANNEL_REQUEST
>       uint32    recipient channel
>       string    "x11-req-foo"
>       boolean   want reply
>       boolean   single connection
>       uint32    x11 screen number
> 
>       byte      SSH_MSG_CHANNEL_OPEN
>       string    "x11-foo"
>       uint32    sender channel
>       uint32    initial window size
>       uint32    maximum packet size
>       uint32    corresponding session channel
>       string    originator address (e.g., "192.168.7.38")
>       uint32    originator port
> 
> Has anybody else already implemented something like that?

No, but I support this.

Nico
--