Re:Timeline to remove DSA support in OpenSSH
by acdha on Thursday January 11, 2024 @10:40AM
(#38953678)
The grind of audit requirements tends to mean those managers are a lot more willing to do the right thing now – it’s less risk than putting your name in writing on the thing which the auditors / insurance company will be using to fail you.
[ Parent
| on HN ]
Re:Timeline to remove DSA support in OpenSSH
by crote on Thursday January 11, 2024 @11:39AM
(#38954595)
I don't think anything using SHA-1 for security is going to pass an audit anyways...
Re:Timeline to remove DSA support in OpenSSH
by acdha on Thursday January 11, 2024 @12:21PM
(#38955318)
Yes, or telnet. My point was that it used to be that random acts of management/ BOFH were more common because they could play politics out of consequences; now that lots of people have insurance or regulatory checks, that’s harder to do. That paperwork might not be the most efficient way to do it but it does at least produce a slow grind forcing the business people to pay attention to problems they used to ignore.