Best practice setting Ciphers & Algorithms?

Damien Miller djm at mindrot.org
Thu Apr 7 09:00:47 AEST 2022


On Wed, 6 Apr 2022, Keine Eile wrote:

> Hi list members,
> 
> is there a best practice setting Ciphers, GSSAPIKexAlgorithms, KexAlgorithms,
> HostKeyAlgorithms, PubkeyAcceptedKeyTypes and CASignatureAlgorithms in one
> shot in a secure manner? If this would look pretty, like this 'modern' styles
> you get from https://ssl-config.mozilla.org/, this would be the cherry on top.

If you run a current release of OpenSSH then you get secure defaults :)


More information about the openssh-unix-dev mailing list