3 ms·
Would be nice if there was a way to configure the server to reject clients that don't support "strict KEX". > OpenSSH 9.6 addresses this protocol weakness thro
by mbac32768 3y ago
Would be nice if there was a way to configure the server to reject clients that don't support "strict KEX".
> OpenSSH 9.6 addresses this protocol weakness through a new "strict KEX" protocol extension that will be automatically enabled when both the client and server support it. This extension makes two changes to the SSH transport protocol to improve the integrity of the initial key exchange.