On 25 September 2017 at 03:40, Tim Broberg <Tim.Broberg@xxxxxxxxxxxxxx> wrote: > I see. > > Yes, using explicitly disabled algorithms is a very surprising behavior. Well from a protocol standpoint it's not using a disabled algorithm. Which client does dh-gex with a 2k max? -- Darren Tucker (dtucker at zip.com.au) GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860 37F4 9357 ECEF 11EA A6FA (new) Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement. _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev