Re: [python-committers] Weak SSH keys

2015-06-03 Thread Jesus Cea
On 03/06/15 16:59, Benjamin Peterson wrote: > That's just how the SSH auth protocol works. The client offers keys > until the server finds one acceptable. I'm not sure how the order is > determined; it's probably arbitrary for OpenSSH. The server will accept the first key it can find a public key

Re: [python-committers] Weak SSH keys

2015-06-03 Thread Skip Montanaro
On Wed, Jun 3, 2015 at 9:59 AM, Benjamin Peterson wrote: > I'm not sure how the order is determined; it's probably arbitrary for OpenSSH. Certainly you wouldn't want it to offer a key generated by a system it knows to be weaker before one generated by a known stronger system? I would hope the Ope

Re: [python-committers] Weak SSH keys

2015-06-03 Thread Benjamin Peterson
On Wed, Jun 3, 2015, at 08:31, Antoine Pitrou wrote: > > > Le 03/06/2015 15:27, Benjamin Peterson a écrit : > > > > > > On Wed, Jun 3, 2015, at 08:21, Antoine Pitrou wrote: > >> > >> Le 02/06/2015 18:42, Benjamin Peterson a écrit : > >>> > >>> > >>> On Tue, Jun 2, 2015, at 12:37, Antoine Pitr

Re: [python-committers] Weak SSH keys

2015-06-03 Thread Antoine Pitrou
Le 03/06/2015 15:27, Benjamin Peterson a écrit : > > > On Wed, Jun 3, 2015, at 08:21, Antoine Pitrou wrote: >> >> Le 02/06/2015 18:42, Benjamin Peterson a écrit : >>> >>> >>> On Tue, Jun 2, 2015, at 12:37, Antoine Pitrou wrote: Le 02/06/2015 18:28, Benjamin Peterson a écrit : > > A

Re: [python-committers] Weak SSH keys

2015-06-03 Thread Benjamin Peterson
On Wed, Jun 3, 2015, at 08:21, Antoine Pitrou wrote: > > Le 02/06/2015 18:42, Benjamin Peterson a écrit : > > > > > > On Tue, Jun 2, 2015, at 12:37, Antoine Pitrou wrote: > >> Le 02/06/2015 18:28, Benjamin Peterson a écrit : > >>> > >>> Also, everyone should use ed25519 keys now. :) > >> > >>

Re: [python-committers] Weak SSH keys

2015-06-03 Thread Antoine Pitrou
Le 02/06/2015 18:42, Benjamin Peterson a écrit : > > > On Tue, Jun 2, 2015, at 12:37, Antoine Pitrou wrote: >> Le 02/06/2015 18:28, Benjamin Peterson a écrit : >>> >>> Also, everyone should use ed25519 keys now. :) >> >> Depends if the servers you connect to have all been migrated to a recent >>