X-Git-Url: https://asedeno.scripts.mit.edu/gitweb/?a=blobdiff_plain;f=doc%2Ffaq.but;h=06448cb81b8680e32606d2b117a9f14b7c13273a;hb=f004bcca17a789356c32527a396b68b71a773db2;hp=a34973bdb7ba76bf14250bea1c5d01729ce25b59;hpb=3d337b49ef55358a9db692696c9a28e9fc146de3;p=PuTTY.git diff --git a/doc/faq.but b/doc/faq.but index a34973bd..06448cb8 100644 --- a/doc/faq.but +++ b/doc/faq.but @@ -1,5 +1,3 @@ -\define{versionidfaq} \versionid $Id$ - \A{faq} PuTTY \i{FAQ} This FAQ is published on the PuTTY web site, and also provided as an @@ -65,6 +63,9 @@ files into PuTTY's format. Yes. SSH-1 support has always been available in PuTTY. +However, the SSH-1 protocol has many weaknesses and is no longer +considered secure; it should be avoided if at all possible. + \S{faq-localecho}{Question} Does PuTTY support \i{local echo}? Yes. Version 0.52 has proper support for local echo. @@ -151,13 +152,14 @@ military-strength cipher. That insignificant host key prompt really does make \e{that} much difference. If you're having a specific problem with host key checking - perhaps -you want an automated batch job to make use of PSCP or Plink, and -the interactive host key prompt is hanging the batch process - then -the right way to fix it is to add the correct host key to the -Registry in advance. That way, you retain the \e{important} feature -of host key checking: the right key will be accepted and the wrong -ones will not. Adding an option to turn host key checking off -completely is the wrong solution and we will not do it. +you want an automated batch job to make use of PSCP or Plink, and the +interactive host key prompt is hanging the batch process - then the +right way to fix it is to add the correct host key to the Registry in +advance, or if the Registry is not available, to use the \cw{-hostkey} +command-line option. That way, you retain the \e{important} feature of +host key checking: the right key will be accepted and the wrong ones +will not. Adding an option to turn host key checking off completely is +the wrong solution and we will not do it. If you have host keys available in the common \i\c{known_hosts} format, we have a script called @@ -1188,7 +1190,7 @@ Partly, because we don't want to move the web site location (see Also, security reasons. PuTTY is a security product, and as such it is particularly important to guard the code and the web site against unauthorised modifications which might introduce subtle security -flaws. Therefore, we prefer that the Subversion repository, web site and +flaws. Therefore, we prefer that the Git repository, web site and FTP site remain where they are, under the direct control of system administrators we know and trust personally, rather than being run by a large organisation full of people we've never met and which is