Re: Fixing exchange of host keys in the SSH key exchange

Mouse <[email protected]> Tue, 4 Apr 2017 18:06:58 -0400 (EDT)
Newsgroups gmane.ietf.secsh
Message-ID <[email protected]>
> if I may stick an oar in sideways: if you go to all the trouble,
> could you add a mechanism by which the server could advise that the
> host key used by the client was still valid but deprecated, and to
> download the new host key once connected?

That actually is a very interesting argument I hadn't thought of for
something operationally like the proposed scheme: it permits the server
to support multiple host keys at once for a single algorithm.  (The
client, of course, already can, since in the current design it's the
one judging host key validity.)

/~\ The ASCII				  Mouse
\ / Ribbon Campaign
 X  Against HTML		[email protected]
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B