https://bugzilla.mindrot.org/show_bug.cgi?id=2209

--- Comment #9 from Darren Tucker <[email protected]> ---
No, the banner is sent before the KEX (it's the first thing on the
wire) but it is included in the exchange hash[0] which is later signed
by the server as part of the DH key exchange, so it is protected from
tampering by a MITM.

[0] https://tools.ietf.org/html/rfc4253#section-8

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to