News for hackers. Stuff that matters.

A comment on RSA/SHA1 signature type disabled by default in OpenSSH.

Re:RSA/SHA1 signature type disabled by default in OpenSSH by hannob on Tuesday August 31, 2021 @01:58PM (#28371310)
Key point to avoid any confusion: This is about the RSA-SHA1 cipher combination. It does not mean that RSA is deprecated.

If you use an RSA key for SSH (server or client) you can continue using that.

This should not affect any modern-day SSH implementation, it will only cut off compatibility with SSH implementations not updated for a very long time.

[ Parent | on HN ]
Re:RSA/SHA1 signature type disabled by default in OpenSSH by hotdogs on Tuesday August 31, 2021 @02:32PM (#28371756)
To tag onto this, modern means OpenSSH 7.2 (released February 2016) or newer. Currently running an enterprise-wide SSH certificate service, and trying to push people along to update their old VMs in preparation for this deprecation.
[ Parent | on HN ]