From unknown Tue May 19 02:13:25 2026
X-Loop: git-admin@x2go.org
Subject: Bug#34: SSH_OPTIONS_FD
Reply-To: Oleksandr Shneyder <oleksandr.shneyder@obviously-nice.de>, 34@bugs.x2go.org
Resent-From: Oleksandr Shneyder <oleksandr.shneyder@obviously-nice.de>
Resent-To: x2go-dev@lists.berlios.de
Resent-CC: X2Go Developers <x2go-dev@lists.berlios.de>
X-Loop: git-admin@x2go.org
Resent-Date: Di, 25 Sep 2012 09:18:01 +0000
Resent-Message-ID: <handler.34.B34.1348564403985@bugs.x2go.org>
Resent-Sender: git-admin@x2go.org
X-X2Go-PR-Message: followup 34
X-X2Go-PR-Package: x2goclient
X-X2Go-PR-Keywords: 
Received: via spool by 34-submit@bugs.x2go.org id=B34.1348564403985
          (code B ref 34); Di, 25 Sep 2012 09:18:01 +0000
Received: (at 34) by bugs.x2go.org; 25 Sep 2012 09:13:23 +0000
Received: from phoca.obviouslynice.de (85-10-207-20.clients.your-server.de [85.10.207.20])
	by ymir (Postfix) with ESMTP id 4AC905DB15
	for <34@bugs.x2go.org>; Tue, 25 Sep 2012 11:13:23 +0200 (CEST)
Received: from [192.168.0.108] (188-195-168-12-dynip.superkabel.de [188.195.168.12])
	(using TLSv1 with cipher AES256-SHA (256/256 bits))
	(No client certificate requested)
	by phoca.obviouslynice.de (Postfix) with ESMTPSA id 025E91A000A;
	Tue, 25 Sep 2012 10:51:50 +0200 (CEST)
Message-ID: <506175AC.8000209@obviously-nice.de>
Date: Tue, 25 Sep 2012 11:13:16 +0200
From: Oleksandr Shneyder <oleksandr.shneyder@obviously-nice.de>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.6esrpre) Gecko/20120817 Icedove/10.0.6
MIME-Version: 1.0
To: Moritz Struebe <Moritz.Struebe@informatik.uni-erlangen.de>
CC: 34@bugs.x2go.org, x2go-dev@lists.berlios.de
References: <505CC771.20300@gmx.de> <handler.34.B34.13482576789462.ackinfo@bugs.x2go.org> <505D9F99.10808@gmx.de> <505DA7B4.3030909@informatik.uni-erlangen.de> <505F6DDB.1070304@gmx.de> <5060251D.90202@informatik.uni-erlangen.de> <20120924132602.316510@gmx.net> <50607239.5090308@informatik.uni-erlangen.de> <5060CF1E.20700@gmx.de> <5060EA24.7070600@obviously-nice.de> <20120925030819.309160@gmx.net> <20120925102525.15264n2buhtuy73p@mail.das-netzwerkteam.de> <50616F8C.2020600@obviously-nice.de> <506172DF.9070902@informatik.uni-erlangen.de>
In-Reply-To: <506172DF.9070902@informatik.uni-erlangen.de>
X-Enigmail-Version: 1.4.1
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="------------enig67560815B108A7221F14423E"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig67560815B108A7221F14423E
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Am 25.09.2012 11:01, schrieb Moritz Struebe:
> On 2012-09-25 10:47, Oleksandr Shneyder wrote:
>>  Sure, it is a
>> fail of system administrator, if he allow such unecrypted authenticati=
on
>> over Internet. But I don't even give them a possibility to make such
>> mistake...
Sorry, here should be "I don't want to give" instead of "I don't give"

>=20
> I don't really get your point. The credentials are used by the browser
> anyway - because otherwise there would be no need for a proxy. I don't
> think it's our job to disable features because of incompetent system
> administrators. After all proxy authentication is normally used within =
LANs.

I don't want to disable any features. I only say, it is nice to have a
possibility to send authentication data to server encrypted. In LAN it
is not a such big problem to send it in clear text. But in case of
SSH-Proxy it is an Internet connection. And I want, that every one, who
use this feature with X2Go know, that sending unecrypted data over
Internet is not safe. And that should not be the same authentication
data as used on other servers.

> Morty
>=20

Alex
--=20
Oleksandr Shneyder
Dipl. Informatik
X2go Core Developer Team

email:  oleksandr.shneyder@obviously-nice.de
web: www.obviously-nice.de

--> X2go - everywhere@home


--------------enig67560815B108A7221F14423E
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlBhdbIACgkQxQmEC5b4kTM2IQCfZI6PjwUzSXSlWhqeD7VJz1RD
QngAmwfrKEDT+x5D+9YuL1b4fE7JPx10
=StIQ
-----END PGP SIGNATURE-----

--------------enig67560815B108A7221F14423E--
