How much does a program that has to talk to arbitrary servers need SSH v1 support?

Question

I'm starting a new project, a cross-platform C++ program that will need to connect to servers of the user's choice using SSH code built into the program. I'm trying to decide between libssh and libssh2. (Licensing is not an issue; libssh's LGPL is fine.)

libssh2 seems, from this page, to be the way to go -- with one possible exception. It doesn't support SSH v1. I have no idea what percentage of servers out there might only support SSH v1 these days. Does anyone have experience in this area, or could point me to something that would answer that?

Alternatively, can anyone point out another SSH library with SCP capability that supports both SSH v1 and v2? Preferably one that is thread-safe and can also support non-blocking operations?

Answer 1

There still exist some hardware devices which only offer SSH1, but when it comes to software, locking to SSH1 is dangerous as SSH1 has security flaws. Consequently if you don't plan to connect to hardware, omitting SSH1 completely is a good idea.

Answer 2

SSHv1 has already been outdated in the times when I became familiar with Linux, back in 2004. SO I don't think that many servers will support SSHv1 only nowadays.

If a server does only support v1, it is to be considered in a very bad state, IMO.