3 ms·

> [after] hardening steps [...] most of the bots can't even negotiate a connection Yep, same here, except I'm using [tinyssh], which organically does not suppo

> [after] hardening steps [...] most of the bots can't even negotiate a connection Yep, same here, except I'm using [tinyssh], which organically does not support password-based auth, or any ciphers other than ssh-ed25519, curve25519-sha256, and chacha20-poly1305@openssh.com. [tinyssh] https://tinyssh.org/ https://tinyssh.org/

vlan0 4y ago
>which organically does not support password-based auth This is the way. Everything else is just gravy imo.
Panino 4y ago
I agree with your post and just want to add that TinySSH also supports sntrup761x25519-sha512@openssh.com for post-quantum security.