arthepsy/ssh-audit

Warn if Protocol 1 is activated

Yamakaky opened this issue · 3 comments

I think it's depreciated?

It should be, but unfortunately it is still pretty widely used. One example is Cisco devices, e.g.:
ssh-audit-ssh1

I said warn, not forbid ^^

SSH1 is rich of security vulnerabilities. It definitely should be "fail", not "warn".