diff options
author | Damien Miller <djm@mindrot.org> | 2010-06-26 10:02:24 +1000 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2010-06-26 10:02:24 +1000 |
commit | 1ab6a51f9b258a6e844f1ee442c15aec7fcb6a72 (patch) | |
tree | 708954349afa3ef3f1294934443d5773c1b6b53f /ChangeLog | |
parent | 383ffe6c5f31d3ecd89caadc8aef1bc2b821d63a (diff) |
- djm@cvs.openbsd.org 2010/06/25 23:10:30
[ssh.c]
log the hostname and address that we connected to at LogLevel=verbose
after authentication is successful to mitigate "phishing" attacks by
servers with trusted keys that accept authentication silently and
automatically before presenting fake password/passphrase prompts;
"nice!" markus@
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -74,6 +74,13 @@ | |||
74 | servers with trusted keys that accept authentication silently and | 74 | servers with trusted keys that accept authentication silently and |
75 | automatically before presenting fake password/passphrase prompts; | 75 | automatically before presenting fake password/passphrase prompts; |
76 | "nice!" markus@ | 76 | "nice!" markus@ |
77 | - djm@cvs.openbsd.org 2010/06/25 23:10:30 | ||
78 | [ssh.c] | ||
79 | log the hostname and address that we connected to at LogLevel=verbose | ||
80 | after authentication is successful to mitigate "phishing" attacks by | ||
81 | servers with trusted keys that accept authentication silently and | ||
82 | automatically before presenting fake password/passphrase prompts; | ||
83 | "nice!" markus@ | ||
77 | 84 | ||
78 | 20100622 | 85 | 20100622 |
79 | - (djm) [loginrec.c] crank LINFO_NAMESIZE (username length) to 512 | 86 | - (djm) [loginrec.c] crank LINFO_NAMESIZE (username length) to 512 |