From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Michael Albinus Newsgroups: gmane.emacs.bugs Subject: bug#18967: Tramp disables important SSH security features Date: Mon, 19 Dec 2016 19:37:50 +0100 Message-ID: <87bmw7ojcx.fsf@gmx.de> References: <545AC52C.1090807@dancol.org> <874muczg8b.fsf@lifelogs.com> <545BA8B0.8060107@dancol.org> <87wq77igvj.fsf@gmx.de> <871sxcbpiw.fsf@fencepost.gnu.org> <8737hs5iq1.fsf@gmx.de> <878trdy60p.fsf@gmx.de> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1482172974 19885 195.159.176.226 (19 Dec 2016 18:42:54 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Mon, 19 Dec 2016 18:42:54 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) Cc: 18967@debbugs.gnu.org, Ted Zlatanov , Stefan Monnier To: Glenn Morris Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Mon Dec 19 19:42:49 2016 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cJ2tb-0004CR-Td for geb-bug-gnu-emacs@m.gmane.org; Mon, 19 Dec 2016 19:42:48 +0100 Original-Received: from localhost ([::1]:47256 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cJ2tg-0001Yt-9a for geb-bug-gnu-emacs@m.gmane.org; Mon, 19 Dec 2016 13:42:52 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:59466) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cJ2q4-0006r9-4N for bug-gnu-emacs@gnu.org; Mon, 19 Dec 2016 13:39:09 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cJ2py-0004Wp-MS for bug-gnu-emacs@gnu.org; Mon, 19 Dec 2016 13:39:08 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:60764) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cJ2py-0004Wl-IW for bug-gnu-emacs@gnu.org; Mon, 19 Dec 2016 13:39:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1cJ2py-0005Mj-3p for bug-gnu-emacs@gnu.org; Mon, 19 Dec 2016 13:39:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Michael Albinus Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 19 Dec 2016 18:39:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 18967 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 18967-submit@debbugs.gnu.org id=B18967.148217269920572 (code B ref 18967); Mon, 19 Dec 2016 18:39:02 +0000 Original-Received: (at 18967) by debbugs.gnu.org; 19 Dec 2016 18:38:19 +0000 Original-Received: from localhost ([127.0.0.1]:47930 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cJ2pH-0005Lk-9w for submit@debbugs.gnu.org; Mon, 19 Dec 2016 13:38:19 -0500 Original-Received: from mout.gmx.net ([212.227.17.21]:64202) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cJ2pF-0005LR-46 for 18967@debbugs.gnu.org; Mon, 19 Dec 2016 13:38:18 -0500 Original-Received: from detlef.gmx.de ([93.197.212.197]) by mail.gmx.com (mrgmx102 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MBZ9u-1cTSxI2vt0-00AVIj; Mon, 19 Dec 2016 19:37:54 +0100 In-Reply-To: (Glenn Morris's message of "Mon, 19 Dec 2016 12:02:01 -0500") X-Provags-ID: V03:K0:cTfY/ElxAwqiKvZwa+4BD79pSo8z5CscOMLqPfKuTOUOTbqF6F5 cGRlSnpLJkzMKurzjG+DjowVQWMZtnAJIIp/cErs4SJ+f/Nv5DQRI9dtz7DIZW9Ms3i4hJD Gd52E8xS2fgS+Wi4cSIQbNCG7xmDcdip9nHkMLyt7xM95xXsAwrlJpCdyMH6mJSfHi5VFGA 4FYzw/7tyfISibK6UpVjQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:JtJA2r3Avwo=:vtTqqENtft3/vEOnjGVFoi KHTa/3h4jM5gph9xA+V0CwRtwyk9bZ1y5a/tXI6o+OoJoW5+Ba7bq24IVvlsZgIxV0ezSCaPO H+bH+Y1QZFZyOlhllvQ6dT28gBUqFtwQio5NzOMXV2sIiglJLVfwtftbmMajzP3/wfdxe9kI7 NBBOz/aAwT/6svBLEMlmHJAXsYoPLUZFDTlsQSkXMJ4kQmHe+gAZ5WZxLivJ0AbJwhF4r3tVI /K8c2hngQWT7bad/tlyWYMUeCJ+cYtGMBQHBJwrdiEP7tod9Igy9HqGO6ivzUBxum45vRqbJ9 UIodt0O3ev4QANhJvNG7mDNoJ79L1Z0NfM89HOeIwQYl9Cv5g3WDqlt0W8LO88ZcmwC+wB4B/ spwD9GiDpGz/nkoD3G9lJrTRSegjUEHVE+UpLiKf0gmLYMA4puGWVJ8zSmYyHuAMj9ore4JQL s0M2OHlmrguN48X48Olvvx0q4OVSAXVtoxRSexuxhOA4Q16BH/LRRDE+E1zue7um8i+QCV3Gh 1C3Q8P5aJ6zDv53hWbpH2i+hNw6ug5y1jaSNCAXCYUj83iRSfIG4MG7Tj49nt8j2jCLyg8diB LEGgT3sEYJaBxqz/jEu2Z9CCi0YoYDzLxgFHYs6m6ykEreT9Rwnq29qA/UeiKYBVZN0mDJwuQ KwuggxdIXNt84UOLN8M/2dtR7g1/VR8Rfe+FHt3euyvfvl8Lcdqs3ItRHLDjypKniVd5VlaQb f1BY2wI/G4er/p4/QFb6gdZO3cs46mqqy2+vdG4EuuwLK+ZQDWDuA91wNYxOVGgYLWduwXF3 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:127210 Archived-At: Glenn Morris writes: Hi Glenn, > Thanks for explaining the issue. It sounds to me like closing this as > wontfix would be appropriate. Perhaps. I have some plans for a while to obsolete tramp-gw.el. When I wrote it back in 2007, it was the only possibility to have an own implementation of HTTP CONNECT tunneling. Meanwhile, putty supports HTTP CONNECT natively. And with ssh, one could use a ProxyCommand based on "nc -X connect ...". No need for Tramp to implement it itself anymore. This would perform much better than my implementation in tramp-gw.el. And this bug would disappear automatically. So let's keep this bug as reminder. And I will see, whether I could document these settings in the Tramp manual. There are some free days next two weeks, isn't it the Xmas break? Best regards, Michael.