diff --git a/Security-Considerations.md b/Security-Considerations.md new file mode 100644 index 0000000..e0c902d --- /dev/null +++ b/Security-Considerations.md @@ -0,0 +1,3 @@ +Following security limitations need to be considered while evaluating Win32 OpenSSH +- Global [ssh_config](https://github.com/PowerShell/Win32-OpenSSH/issues/847) and [known_hosts](https://github.com/PowerShell/Win32-OpenSSH/issues/466) are not honored. +- [Elevation of Privilege over loopback](Elevation of privilege over loopback) on misconfigured machines.