3 ms·

I thought about that, but then, if you setup that kind of a system, isn't it your responsibility to worry about how to generate and persist cryptographic state?

I thought about that, but then, if you setup that kind of a system, isn't it your responsibility to worry about how to generate and persist cryptographic state? It's such a niche and advanced use-case by someone who should really know better considering the setup... why should all the other >95% of users pay such a price for it? Edit: Replaced "host keys" with "cryptographic state".

zajio1am 7y ago
The issue is not about host keys, which are generated once. It is about randomness that sshd needs for nonces and session keys. It needs fresh randomness during each boot.
- mehrdadn 7y ago
  Okay, I substituted "cryptographic state" for "host keys". It doesn't change my argument.