Re:Targeted MitM attacks using information leakage in SSH cl...
by jlgaddis on Saturday July 04, 2020 @02:47PM
(#23734120)
It's a good idea to explicitly set the "Ciphers", "HostKeyAlgorithms", "KexAlgorithms", and "MACs" options to your preferred values (in your ssh_config and sshd_config files) anyways... but, as a bonus, the issue doesn't affect you if you have (according to the document).
[ Parent
| on HN ]
Re:Targeted MitM attacks using information leakage in SSH cl...
by floatingatoll on Saturday July 04, 2020 @05:43PM
(#23735112)
If you set these options yourself rather than depending on your upstream distro defaults, be prepared to experience surprising and unexpected incompatibilities with SSH; by making your own choices, you are accepting additional responsibilities for debugging compatibility issues that will arise. When you encounter issues with anything SSH-related, be sure you've checked your SSH client/server in verbose mode to verify that it is not a PEBCAK issue before seeking technical support from others, and be sure to include your custom values for those options when reporting SSH issues to others so that everyone doesn't waste time trying (uselessly) to repro your issue without them.