10 Dec
2007
10 Dec
'07
1:05 p.m.
I've looked over the man page for `ssh' and `ssh_config' on several systems and I think people have it backwards. The pages I read indicate that `-X' is more secure than `-Y'. Under the `-X' part on several systems I have access to says:
"For this reason, X11 forwarding is subjected to X11 SECURITY extension restrictions by default."
The `-Y' says:
"Trusted X11 forwardings are not subjected to the X11 SECURITY extension controls."
I would think being subjected to security controls would be more secure than not being subjected to them.
--
Brent L. Bates (UNIX Sys. Admin.)
M.S. 912 Phone:(757) 865-1400, x204
NASA Langley Research Center FAX:(757) 865-8177
Hampton, Virginia 23681-0001
Email: B.L.BATES@larc.nasa.gov http://www.vigyan.com/~blbates/