Conversation

Notices

1. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 25-Mar-2024 10:32:15 JST Ryan Castellucci :nonbinary_flag:

   in reply to

   • Matthew Garrett

   @mjg59 Server talks first.

   • Embed this notice
     Matthew Garrett (mjg59@nondeterministic.computer)'s status on Monday, 25-Mar-2024 10:32:17 JST Matthew Garrett

     Is there a reason ssh doesn't support including server name in the handshake before key exchange so it can be proxied to the actual host via a single IP? I know you can make this work with proxycommand, it just seems like a weird absence in the protocol