On Thu, 13 Feb 2014, Scott Neugroschl wrote: > >Hubert Kario <hkario <at> redhat.com> writes: > > > >> [SNIP] > > > >3. OpenSSH primitives should be confined to ensure interoperability > > with implementations that are RFC non-compliant (e.g. cryptlib & > > DH GEX & RFC 4419). > > > >What's the point of standards then? > > Maybe a ssh_config option for DH GEX group size, so that people like > Hubert can configure SSH such implementations? You can do this now by editing /etc/ssh/moduli Also KexAlgorithms=diffie-hellman-group14-sha1 -d _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev