[Labs-l] sshd config: using newer ciphers and protocols

[Merlijn van Deen]

On 21 May 2015 at 21:31, Daniel Zahn <dzahn at wikimedia.org> wrote:

> recently we have been making some changes to global sshd config for
> enhanced security.
>

We have temporarily reverted this for Tool Labs, as we've found a few more
situations where people are unable to log in (NetBSD ssh (not sure about
the version, but not that old), Debian Squeeze, some versions of git bash
on windows, PuTTY < 0.62). Of course, we'd prefer to use more secure
ciphers, so we'll try to find a solution where we find a balance between
security and usability.

Best,
Merlijn
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20150524/21351639/attachment.html>