News for hackers. Stuff that matters.
Re:Simple SSH Security by tialaramex on Monday November 08, 2021 @03:49PM (#29154048)
The algorithms used will be negotiated. So, unless your SSH client is unwilling to use any of the acceptable algorithms it just will work.

For the server's proof of its identity, one gap in older SSH versions is that the client doesn't learn other host keys. So if your client is content with Archaic-host-key, even though the server has been telling anybody new about Shiny-modern-host-key, when the server finally removes Archaic-host-key the client can't verify this server. In modern OpenSSH UpdateHostKeys controls this in clients and defaults to learning new host keys in the most obvious cases.

Re:Simple SSH Security by yjftsjthsd-h on Monday November 08, 2021 @03:54PM (#29154129)
You could also deal with updating host keys by signing them and just having clients trust the signing authority.
Re:Simple SSH Security by haarts on Monday November 08, 2021 @04:08PM (#29154305)
Re:Simple SSH Security by egberts1 on Tuesday November 09, 2021 @01:15PM (#29165203)
Does it work with closed network like in a whitlab?