%% You should probably cite draft-gutmann-ssh-preauth-03 instead of this revision. @techreport{gutmann-ssh-preauth-00, number = {draft-gutmann-ssh-preauth-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-gutmann-ssh-preauth/00/}, author = {Peter Gutmann}, title = {{A Pre-Authentication Mechanism for SSH}}, pagetotal = 7, year = 2022, month = dec, day = 13, abstract = {Devices running SSH are frequently exposed on the Internet, either because of operational considerations or through misconfiguration, making them vulnerable to the constant 3-degree background radiation of scanning and probing attacks that pervade the Internet. This document describes a simple pre-authentication mechanism that limits these attacks with minimal changes to SSH implementations and no changes to the SSH protocol itself.}, }