[arch-general] SSH security

[Ike Devolder]

On Tue, Jan 06, 2015 at 08:29:39AM -0500, Ido Rosen wrote:
> Just wondering, how do Arch devs feel about implementing these
> recommendations by default in Arch's openssh package?  Or would this be
> something worthy of an AUR package?
> 
> https://stribika.github.io/2015/01/04/secure-secure-shell.html
> 
> Especially interested in the moduli, KexAlgorithms, and Cipher selection
> config changes.
> 
> Cheers,
> Ido

Since Arch policy is no patch unless something breaks, this should go to
upstream and try to get some of this stuff default from upstream.

-- 
Ike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20150106/b031636e/attachment.bin>