Re: draft-ietf-curdle-ssh-modp-dh-sha2 & draft-ietf-curdle-ssh-kex-sha2

Damien Miller <[email protected]>
Newsgroups gmane.ietf.curdle,gmane.ietf.secsh
Message-ID <[email protected]>
On Tue, 13 Sep 2016, Mark D. Baushke wrote:

> > IMO these two should be MAY. Most implementations don't support
> > GSSAPI key exchange at all.
> 
> Perhaps I need a paragraph like this one:
> 
>      If GSS-API methods are available, then the RFC4462 REQUIRED
>      gss-group14-sha1-* method SHOULD be retained for compatibility
>      with older Secure Shell implementations and the
>      gss-groups14-sha256-* method SHOULD be added as for "sha1".

Sounds good, and maybe with an asterisk or footnote marker next
to the SHOULD in the main list.

-d
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.