Re: Debian openssh option review: considering splitting out GSS-API key exchange

2024-08-30 Thread Damien Miller
Excellent - this substantially reduces the amount of pre-authentication attack surface exposed on your users' sshd by default. On Fri, 30 Aug 2024, Colin Watson wrote: > On Tue, Apr 02, 2024 at 01:30:11AM +0100, Colin Watson wrote: > > * for Debian trixie (current testing): > > > >* add dep

Re: Debian openssh option review: considering splitting out GSS-API key exchange

2024-04-01 Thread Damien Miller
On Tue, 2 Apr 2024, Colin Watson wrote: [I'm not subscribed to the debian-* lists, please Cc me in replies if you want me to see them] > [I've CCed openssh-unix-dev for awareness, but set Mail-Followup-To to > just debian-devel and debian-ssh to avoid potentially spamming them > with a long discu