Post-quantum Page Documentation Update
zzq1015
zzq1015 at gmail.com
Mon Aug 18 01:05:42 AEST 2025
Hi,
So on the https://www.openssh.com/pq.html page -> the FAQ -> "I
received a warning from ssh that directed me to this page. What should
I do?" section, the example configuration should be, according to the
documentation (https://man.openbsd.org/ssh_config.5):
Match host unsafe.example.com
WarnWeakCrypto no-pq-kex
"no-pq-kex" means to disable PQ-related warnings, while "no" disables
every warning. In the future, more warnings on weak crypto could be
introduced. Currently, the best approach is to disable only PQ-related
warnings, while still allowing other weak crypto warnings, which is
consistent with the text above.
Best regards,
Sam
More information about the openssh-unix-dev
mailing list