4 ms·
Resolved in OpenSSH 9.6, which was released yesterday. Unfortunately it appears both client and server must be updated for the change to automatically be effect
by binkHN 3y ago
Resolved in OpenSSH 9.6, which was released yesterday. Unfortunately it appears both client and server must be updated for the change to automatically be effective.
More at https://www.openssh.com/releasenotes.html#9.6 https://www.openssh.com/releasenotes.html#9.6
- mbac32768 3y agoWould be nice if there was a way to configure the server to reject clients that don't support "strict KEX". > OpenSSH 9.6 addresses this protocol weakness through a new "strict KEX" protocol extension that will be automatically enabled when both the client and server support it. This extension makes two changes to the SSH transport protocol to improve the integrity of the initial key exchange.