view TODO @ 1157:14854ea32d2c

fix default build when crypt() is unavailable if the system doesn't support crypt.h/crypt, then ENABLE_SVR_PASSWORD_AUTH cannot work. rather than default this to on all the time, do so only when support for the header is found.
author Mike Frysinger <vapier@gentoo.org>
date Wed, 21 Oct 2015 22:40:11 +0800
parents 0cbe8f6dbf9e
children
line wrap: on
line source

Current:

Things which might need doing:

- default private dbclient keys

- Make options.h generated from configure perhaps?

- handle /etc/environment in AIX

- check that there aren't timing issues with valid/invalid user authentication
  feedback.

- Binding to different interfaces

- CTR mode
- SSH_MSG_IGNORE sending to improve CBC security
- DH Group Exchange possibly, or just add group14 (whatever it's called today)

- fix scp.c for IRIX

- Be able to use OpenSSH keys for the client? or at least have some form of 
  encrypted keys.

- Client agent forwarding

- Handle restrictions in ~/.ssh/authorized_keys ?