DH Group Exchange Fallback

Darren Tucker dtucker at zip.com.au
Mon Sep 25 11:04:08 AEST 2017

On 25 September 2017 at 08:01, Damien Miller <djm at mindrot.org> wrote:
> What behaviour would you like for this case? We can't send a group that is
> larger than 2048, because the client has said that is the maxiumum that
> will accept. Would you prefer the server disconnect at that point?

Maybe only offer group14 in dh-gex the fallback path if the group14
methods are in KexAlgorithms?

Darren Tucker (dtucker at zip.com.au)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA (new)
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list