[saag] Re: Side-meeting at IETF120 on improving SSH

[David Schinazi <[e-mail]>]

On Fri, Jun 7, 2024 at 1:50 AM John Mattsson <john.mattsson=
[e-mail]> wrote:

> Hi,
>
> *François Michel wrote:*
>
> >We would like to gauge how many people would be interested in
> participating
>
>
>
> I would be interested in participating remotely.
>
>
>
> *David Schinazi wrote:*
>
> >I have a clarifying question for you. Does Ericsson maintain its own
>
> >implementation of SSH? Or do you use an open-source one?
>
> >I'm mainly curious in terms of gaging implementer interest, in addition to
>
> >deployments.
>
>
>
> Ericsson maintains one SSH implementation that is open-source. We use this
> in products written in erlang (ericsson language). Other products from
> Ericsson use various other SSH libraries, which may or may not be
> open-source.
>
> https://www.erlang.org/doc/apps/ssh/ssh.html
>

Thanks John, that's great to hear! I'm happy we have more implementations
of SSH than the ones I knew about.
David

*François Michel wrote:*
>
> >This follows a presentation of a proposal for SSH + HTTP/3 at IETF 119
>
>
>
> As I wrote on the SAAG mailing list after IETF 118, I think this is a
> good idea to explore. This would solve all the main problems I see with
> SSHv2 which is lack of formal verification, support of X.509, and alignment
> with TLS algorithms. IJust like SSL 2.0 – TLS 1.2, SSHv2 is built on a
> very shaky ground.
>
>
>
> https://mailarchive.ietf.org/arch/msg/saag/2B6HlBCsH2Pt3WhusIDkgxCcac4/
>
>
>
> The SSHv2 protocol is in a weird spot were it is a IETF proposed standard
> but modern SSH has turned into a de-facto standard mostly controlled by
> OpenBSD's OpenSSH.
>
>
>
> Cheers,
>
> John
> _______________________________________________
> saag mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>