Hacker News Reader

we're not necessarily talking about ssh authentication. Wouldn't that send the entire password as a single packet, anyway?

correct - this is for the post-auth session and not the authentication phase