Re: can ssh be used for secure login without encrypting session afterwards?

From: Richard E. Silverman (slade@shore.net)
Date: 04/03/02


From: slade@shore.net (Richard E. Silverman)
Date: 03 Apr 2002 06:21:12 -0500


>>>>> "sti" == sti <sis@hymite.com> writes:

    sti> Is there a way to set up ssh to not encrypt the session after
    sti> successful login?

This should not be done with SSH-1. It's more reasonable with SSH-2, but
you'd still have to be careful, e.g. you mustn't use password
authenticatino, because the password would go in the clear. In any case,
most SSH software does not allow you to select "no encryption," to prevent
people from shooting themselves in the foot.

    sti> Or are there any other suggestions to get around this
    sti> double-encryption problem?

Why do you think it's a problem?

-- 
  Richard Silverman
  slade@shore.net