https://bugzilla.mindrot.org/show_bug.cgi?id=2058
Laurent <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #2 from Laurent <[email protected]> --- I'm seeing this issue as well, and I'd like it to be addressed. The issue here is that it is often requested by lawyers to have a warning message before log in. Obviously, ASCII cannot not fit every language, so that is going to be an issue for many. English is not the world language. In some places, like China, it is even mandatory for software to support the local charset, and for good reason (GB18030 for China, but that maps to Unicode). The risk here is that by trying to avoid a specific security issue, pragmatic users will have no other choice than to use older versions, or hack in their own patches, both of which might create bigger issues than the one avoided. And of course, the SSH IETF draft standard itself mandates using Unicode for the banner, so being non standard is a problem too. I think that absent a perfect solution that checks the output is perfectly valid UTF-8, there should be a user-configurable flag to allow it if needed. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. _______________________________________________ openssh-bugs mailing list [email protected] https://lists.mindrot.org/mailman/listinfo/openssh-bugs
