Results 1 to 3 of 3

Thread: Can ISP's see your SSH username?

  1. #1
    Join Date
    Sep 2008
    Beans
    105

    Can ISP's see your SSH username?

    I know that SSH is meant to be an encrypted protocol, but if you start an ssh session at the terminal with "ssh username@yourfavorite.server.com", how much of that can your ISP see? Can they see the username you're using and the name of the server you're ssh'ing into? Does encryption occur only after you've logged in?

  2. #2
    Join Date
    Oct 2005
    Location
    Al Ain
    Beans
    7,818

    Re: Can ISP's see your SSH username?

    The ISP can only see the name and IP address of the server.

    You can check with tcpdump, wireshark or ngrep.

  3. #3
    Join Date
    Feb 2005
    Location
    Texas
    Beans
    Hidden!
    Distro
    Ubuntu 10.10 Maverick Meerkat

    Re: Can ISP's see your SSH username?

    Unless you're being subjected to a MITM attack*, only the remote host sees your ssh username.

    ---

    * openssh has mechanisms in place to warn you about this, assuming you've already successfully connected to the remote host in the past.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •