Post-quantum Page Documentation Update

zzq1015 zzq1015 at gmail.com
Mon Aug 18 01:05:42 AEST 2025


Hi,

So on the https://www.openssh.com/pq.html page -> the FAQ -> "I
received a warning from ssh that directed me to this page. What should
I do?" section, the example configuration should be, according to the
documentation (https://man.openbsd.org/ssh_config.5):

Match host unsafe.example.com
    WarnWeakCrypto no-pq-kex

"no-pq-kex" means to disable PQ-related warnings, while "no" disables
every warning. In the future, more warnings on weak crypto could be
introduced. Currently, the best approach is to disable only PQ-related
warnings, while still allowing other weak crypto warnings, which is
consistent with the text above.

Best regards,
Sam


More information about the openssh-unix-dev mailing list