Another security hole of PuTTY is downloads being served over non-SSL. I should know better and check the sigs using PGP and checksums, but on Windows this is such a drag that I just end up whispering hallelujah praise the Lord, and hoping for the best. I know it's my fault, but I'd still like SSL :(
> I should know better and check the sigs using PGP and checksums Kind of pointless. If the download has been compromised so have the checksums
PuTTY 0.64 released, fixing a security hole
11–20 of 43 posts
Re: PuTTY 0.64 released, fixing a security hole
#12Another security hole of PuTTY is downloads being served over non-SSL. I should know better and check the sigs using PGP and checksums, but on Windows this is such a drag that I just end up whispering hallelujah praise the Lord, and hoping for the best. I know it's my fault, but I'd still like SSL :(
> but on Windows this is such a drag that Get the keybase.io client, it sets up your GPG pretty nicely. I was able to confirm the downloads on Windows using the standard ``gpg --verify putty.DSA.asc`` and it just worked(tm) in a cmd.exe window. Using the keybase client does not, however, as the signing key for the putty binaries is not on keybase. Not saying anything about how much sense it makes to verify the downlo…
Re: PuTTY 0.64 released, fixing a security hole
#13Re: PuTTY 0.64 released, fixing a security hole
#14Re: PuTTY 0.64 released, fixing a security hole
#15Do you know a SSH client that can share configs cross-platform? So I can define my connections once, and use on Windows/OSX/*nix?
Re: PuTTY 0.64 released, fixing a security hole
#16I used to be a huge PuTTY (or derative) user, but recently, I've switched to just using the normal OpenSSH command-line client within Cygwin and ConEmu. While PuTTY is nice, it lacks some features, like proxycommands and stuff which are standard in ~/.ssh/config. Things which can be taken along in a simple & portable fashion. No disrespect to PuTTY, but I just found myself not really needing it anymore.
I found it very useful for connecting to vagrant boxes.
Re: PuTTY 0.64 released, fixing a security hole
#17I used to be a huge PuTTY (or derative) user, but recently, I've switched to just using the normal OpenSSH command-line client within Cygwin and ConEmu. While PuTTY is nice, it lacks some features, like proxycommands and stuff which are standard in ~/.ssh/config. Things which can be taken along in a simple & portable fashion. No disrespect to PuTTY, but I just found myself not really needing it anymore.
Re: PuTTY 0.64 released, fixing a security hole
#18I used to be a huge PuTTY (or derative) user, but recently, I've switched to just using the normal OpenSSH command-line client within Cygwin and ConEmu. While PuTTY is nice, it lacks some features, like proxycommands and stuff which are standard in ~/.ssh/config. Things which can be taken along in a simple & portable fashion. No disrespect to PuTTY, but I just found myself not really needing it anymore.
You can get SSH natively in the DOS command prompt by installing http://www.mls-software.com/opensshd.html I found it very useful for connecting to vagrant boxes.
Re: PuTTY 0.64 released, fixing a security hole
#19Re: PuTTY 0.64 released, fixing a security hole
#20I used to be a huge PuTTY (or derative) user, but recently, I've switched to just using the normal OpenSSH command-line client within Cygwin and ConEmu. While PuTTY is nice, it lacks some features, like proxycommands and stuff which are standard in ~/.ssh/config. Things which can be taken along in a simple & portable fashion. No disrespect to PuTTY, but I just found myself not really needing it anymore.