3 ms·

> Sounds like the real problem is some part of the system can't be bothered to persist its state. Persistent state is hard. For example, some systems run with

> Sounds like the real problem is some part of the system can't be bothered to persist its state. Persistent state is hard. For example, some systems run with read-only filesystem.

mehrdadn 7y ago
I thought about that, but then, if you setup that kind of a system, isn't it your responsibility to worry about how to generate and persist cryptographic state? It's such a niche and advanced use-case by someone who should really know better considering the setup... why should all the other >95% of users pay such a price for it? Edit: Replaced "host keys" with "cryptographic state".
- zajio1am 7y ago
  The issue is not about host keys, which are generated once. It is about randomness that sshd needs for nonces and session keys. It needs fresh randomness during each boot.
  - mehrdadn 7y ago
    Okay, I substituted "cryptographic state" for "host keys". It doesn't change my argument.