No FUD intended, was genuinely asking. I recalled this 2018 article[0] titled, "The default OpenSSH key encryption is worse than plaintext" and was wondering i

No FUD intended, was genuinely asking. I recalled this 2018 article[0] titled, "The default OpenSSH key encryption is worse than plaintext" and was wondering if it is still true. Safe practices are a moving target. One on which I am not qualified to answer, hence my queries. Good to know that OpenSSH is improving, but is the future uniformly distributed? If you are running a Redhat LTS release, are you getting a secure by default private key protection, or do you have to invoke the correct command? I default to Github's keygen recommendations, but I can believe that others will run ssh-keygen without arguments. [0] https://latacora.github.io/blog/2018/08/03/the-default-openssh/ https://latacora.github.io/blog/2018/08/03/the-default-opens...