Re:Timeline to remove DSA support in OpenSSH
by o11c on Thursday January 11, 2024 @11:32AM
(#38954488)
When I got into Linux around 2010 there was something that encouraged me to make a DSA key instead of an RSA one ...
[ Parent
| on HN ]
Re:Timeline to remove DSA support in OpenSSH
by Piskvorrr on Thursday January 11, 2024 @01:03PM
(#38956030)
Encouraged, sure. Last time I saw something that actually required DSA, it was literally decades old, and that encounter didn't happen in this decade either. I do have some tools for ancient machines, such as with SSHv1 support, but it's more akin to archeology than access to working machines.
Re:Timeline to remove DSA support in OpenSSH
by Macha on Thursday January 11, 2024 @12:16PM
(#38955245)
Arch Wiki was still recommending dsa around that time: https://wiki.archlinux.org/index.php?title=SSH_keys&oldid=66...
Re:Timeline to remove DSA support in OpenSSH
by dharmab on Friday January 12, 2024 @01:47PM
(#38972170)
There was a lot of suspect advice on the TLS and SSH pages. I did a pass a couple of years ago, updating the recommendation to EC keys if possible and RSA otherwise, with links to relevant academic sources.