113 reputation
4
bio website
location France
age 31
visits member for 1 year, 11 months
seen Jun 2 at 11:42

I'm a Java "expert" working for a major SSII.

I'm currently working on applications for the healthcare world


Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
@CodesInChaos Well, I think that if the server admin chooses to disable RSA kex as suggested by Paulo Ebermann there is no way of downgrading
Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
Nice answer :) thanks. So, if I summarize : under DH key exchange, the hacker can pretend to be the server but cannot do anything more. No decryption or tampering is possible... I was wrong ;) : I thought that losing the server key would lead to a worst situation.
Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
@HeatfanJohn impersonating the server allow a man-in-the-middle attack be carefull : We accepted the fact that the hacker was already in MitM position. How we don't care, we just want to know what he could do if he manage to find the server's key
Sep
4
comment implications of SSH server key compromission when authenticating users against a public key
@poncho thanks for the tag : my reputation was too low to add it myself