News for hackers. Stuff that matters.

A comment on Timeline to remove DSA support in OpenSSH. Parent comment

Re:Timeline to remove DSA support in OpenSSH by shawnz on Thursday January 11, 2024 @12:06PM (#38955066)
It's already disabled by default, which is basically what you are asking for. However, disabling it by default doesn't solve the problem of the maintenance burden. That's what this change is meant to solve:

> [...] we no longer consider the costs of maintaining DSA in OpenSSH to be justified.

[ Parent | on HN ]
Re:Timeline to remove DSA support in OpenSSH by V-eHGsd_ on Thursday January 11, 2024 @12:17PM (#38955267)
exactly. and if the added burden of having to maintain (or more likely, just download) a version of ssh that supports dsa means that some piece of legacy hardware is no longer cost effective, then it's probably time to upgrade that legacy hardware.

and you (the general you) should probably be thanking the openssh folks for all the work they've done for the last 8+ years keeping the dsa code around which allowed you (the general you) to externalize that cost.

[ Parent | on HN ]