On Sat, Jun 7, 2014 at 7:23 PM, Damien Miller <djm@xxxxxxxxxxx> wrote: > On Fri, 6 Jun 2014, Armin Wolfermann wrote: > > [...] > Unfortunately, this a a bit confusing - some Match criteria only work > after key exchange has completed. If users try something like > > Match user djm > Ciphers aes128-cbc > > then it will never work. Actually in this particular case you could probably force a rekeying as soon as the username is received and make this work more or less as expected. That'd work for Compression too. -- Darren Tucker (dtucker at zip.com.au) GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement. _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev