[tor-relays] Secure secure Shell update protocols

[0x23]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Before anyone goes and implements the above, you should probably read the
related thread on the Applied Crypto Hardening mailing list discussing the
pros and cons of this particular write-up.
http://lists.cert.at/pipermail/ach/2015-January/001684.html

You should should first read the whole post carefully before replying by simply adding a discussion link...;-p

ssh-keygen -G "${HOME}/moduli" -b 4096




Am 10. Januar 2015 17:36:02 MEZ, schrieb Seth <list at sysfu.com>:
>On Fri, 09 Jan 2015 12:46:11 -0800, 0x23 <rush23 at gmx.net> wrote:
>> wanna share some current insights regarding secure shell(ssh) on how
>to
>> harden sys after the German 'Der Spiegel' disclosed documents.h
>>
>> https://stribika.github.io/2015/01/04/secure-secure-shell.html
>
>Before anyone goes and implements the above, you should probably read
>the
>related thread on the Applied Crypto Hardening mailing list discussing
>the
>pros and cons of this particular write-up.
>http://lists.cert.at/pipermail/ach/2015-January/001684.html

- --
-----BEGIN PGP SIGNATURE-----
Version: APG v1.1.1
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=w8yO
-----END PGP SIGNATURE-----