4 ms·

I thought this was a joke, but they really don't: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/ed25519-ssh-keys https://learn.microsoft

by er0k 3y ago

I thought this was a joke, but they really don't: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/ed25519-ssh-keys https://learn.microsoft.com/en-us/troubleshoot/azure/virtual... what the fuck? What is Microsoft doing? ed25519 was added to openssh, what, 7 years ago? This boggles my mind.

Macha 3y ago
Just about exactly 10 years ago, actually: https://lwn.net/Articles/590870/ https://lwn.net/Articles/590870/
pbhjpbhj 3y ago
Maybe they're supporting TLAs abilities to crack Microsoft users when 'necessary'?
adastra22 3y ago
It actually violates some federal contracting rules to support non-NIST keys. Maybe they don’t bother for that reason?
- dharmab 3y ago
  Azure's gov cloud is a separate API.
  - adastra22 3y ago
    With a lot of shared software. Need a strong reason to introduce differences which if accidentally misconfigured could have large contract liabilities.