113 reputation
5
bio website
location France
age 32
visits member for 2 years, 1 month
seen yesterday

I'm a Java "expert" working for a major SSII.

I'm currently working on applications for the healthcare world


Sep
24
awarded  Autobiographer
Sep
5
awarded  Editor
Sep
5
revised implications of SSH server key compromission when authenticating users against a public key
added 165 characters in body
Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
@CodesInChaos Well, I think that if the server admin chooses to disable RSA kex as suggested by Paulo Ebermann there is no way of downgrading
Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
Nice answer :) thanks. So, if I summarize : under DH key exchange, the hacker can pretend to be the server but cannot do anything more. No decryption or tampering is possible... I was wrong ;) : I thought that losing the server key would lead to a worst situation.
Sep
4
awarded  Scholar
Sep
4
awarded  Supporter
Sep
4
accepted implications of SSH server key compromission when authenticating users against a public key
Sep
4
awarded  Student
Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
@HeatfanJohn impersonating the server allow a man-in-the-middle attack be carefull : We accepted the fact that the hacker was already in MitM position. How we don't care, we just want to know what he could do if he manage to find the server's key
Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
@poncho thanks for the tag : my reputation was too low to add it myself
Sep
3
asked implications of SSH server key compromission when authenticating users against a public key