 |
 |
 |
 |
|
 |
|
 |
|
 |
|
 |
|
|
|
|
|
|
|
|
|
|
|
|
The securityLevel and securityModel are transported in the message... securityName, on the other hand, is a security-model-dependent... For SSH, the two sides do not have to agree on the same securityName...
I'm still short on sleep, but this sounds sane to me, and I'm fairly convinced there is not a problem -- as long as we believe it's OK that the two parties to a transation might not use the same securityName.
-- Jeff