fedora-docs-l10n/fedora-system-administrat/f28/pages/infrastructure-services/OpenSSH — Korean @ Fedora Weblate: No one can intercept the communication

Translation

English type: Labeled list

Korean

Needs editing

Skip

	English	Korean	Actions
	Why Use SSH?	왜 SSH를 사용하나요?
	indexterm:[SSH protocol,security risks] Potential intruders have a variety of tools at their disposal enabling them to disrupt, intercept, and re-route network traffic in an effort to gain access to a system. In general terms, these threats can be categorized as follows:
	Interception of communication between two systems	두 시스템 사이에서 통신 차단
	The attacker can be somewhere on the network between the communicating parties, copying any information passed between them. He may intercept and keep the information, or alter the information and send it on to the intended recipient.
	This attack is usually performed using a _packet sniffer_, a rather common network utility that captures each packet flowing through the network, and analyzes its content.
	Impersonation of a particular host	특정한 호스트 사칭
	Attacker's system is configured to pose as the intended recipient of a transmission. If this strategy works, the user's system remains unaware that it is communicating with the wrong host.
	This attack can be performed using a technique known as _DNS poisoning_, or via so-called _IP spoofing_. In the first case, the intruder uses a cracked DNS server to point client systems to a maliciously duplicated host. In the second case, the intruder sends falsified network packets that appear to be from a trusted host.
	Both techniques intercept potentially sensitive information and, if the interception is made for hostile reasons, the results can be disastrous. If SSH is used for remote shell login and file copying, these security threats can be greatly diminished. This is because the SSH client and server use digital signatures to verify their identity. Additionally, all communication between the client and server systems is encrypted. Attempts to spoof the identity of either side of a communication does not work, since each packet is encrypted using a key known only by the local and remote systems.
	Main Features	주요 특징
	indexterm:[SSH protocol,features]indexterm:[OpenSSH,SSH] The SSH protocol provides the following safeguards:	indexterm:[SSH 통신규약,특징]indexterm:[OpenSSH,SSH] SSH 통신규약은 다음 보호장치를 제공합니다:
	No one can pose as the intended server	누구도 의도된 서버로 가장 할 수 없습니다
	After an initial connection, the client can verify that it is connecting to the same server it had connected to previously.	초기 연결 후에, 클라이언트는 이전에 연결했던 동일한 서버에 연결하고 있는지 확인 할 수 있습니다.
	No one can capture the authentication information	누구도 인증 정보를 캡춰 할 수 없습니다
	The client transmits its authentication information to the server using strong, 128-bit encryption.	클라이언트는 이 인증 정보를 강력한 128-비트 암호를 사용하여 서버에 전달합니다.
	No one can intercept the communication	누구도 통신을 가로 챌 수 없습니다
	All data sent and received during a session is transferred using 128-bit encryption, making intercepted transmissions extremely difficult to decrypt and read.
	Additionally, it also offers the following options:	추가적으로, 이는 또한 다음 옵션을 제공합니다:
	It provides secure means to use graphical applications over a network
	Using a technique called _X11 forwarding_, the client can forward _X11_ (_X Window System_) applications from the server. Note that if you set the [option]`ForwardX11Trusted` option to `yes` or you use SSH with the [option]`-Y` option, you bypass the X11 SECURITY extension controls, which can result in a security threat.
	It provides a way to secure otherwise insecure protocols
	The SSH protocol encrypts everything it sends and receives. Using a technique called _port forwarding_, an SSH server can become a conduit to securing otherwise insecure protocols, like POP, and increasing overall system and data security.
	It can be used to create a secure channel
	The OpenSSH server and client can be configured to create a tunnel similar to a virtual private network for traffic between server and client machines.
	It supports Kerberos authentication
	OpenSSH servers and clients can be configured to authenticate using the GSSAPI (Generic Security Services Application Program Interface) implementation of the Kerberos network authentication protocol.
	Protocol Versions
	indexterm:[SSH protocol,version 1]indexterm:[SSH protocol,version 2] Two varieties of SSH currently exist: version 1 and version 2. The OpenSSH suite under {MAJOROS} uses SSH version 2, which has an enhanced key exchange algorithm not vulnerable to the known exploit in version 1. However, for compatibility reasons, the OpenSSH suite does support version 1 connections as well, although version 1 is disabled by default and needs to be enabled in the configuration files.
	Avoid using SSH version 1
	To ensure maximum security for your connection, it is recommended that only SSH version 2-compatible servers and clients are used whenever possible.
	Event Sequence of an SSH Connection