Hey. What are the differences (if any) between the authentication methods gssapi-keyex and gssapi-with-mic, especially from a security point of view. I understand, that gssapi-keyex works of course only when the KEX was made via GSS, while gssapi-with-mic works also with normal SSH KEX. gssapi-with-mic in turn works also with GSS KEX. RFC 4462 doesn't seem to tell much about the disadvantages / advantages of the two over each other. And as far as I understand gssapi-keyex uses a MIC as well? Thanks, Chris.
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
