hypnos wrote: > Am I correct in assuming that the encryption between > client/server is started before any exchange of data > takes place? Specifically, I'm wondering if the > username is passed in clear-text or encrypted when > using the -l <username> option to ssh client. The machine public keys are exchanged, after that *everything* (including username and password) is encrypted. HTH, -Adam P.