Re: Terrapin

On Thu, 28 Dec 2023, Peter Gutmann wrote:

> 
> Mouse <[email protected]> writes:
> 
> >(a) As I understand it, OpenSSH's "strict kex" is, currently, using an
> >@openssh.com name.  Such experiments are what @fqdn extension names are _for_.
> 
> Right, but because of OpenSSH's dominance in the market, their experiments end
> up being de facto MUST's for everyone else.  This is what happened with EtM-
> OpenSSH, it got set as the only permitted mode by OpenSSH and/or some major
> distros and then everyone had to implement it whether they wanted to or not
> because without it they couldn't interoperate with a pile of servers.

OpenSSH has never disabled support for non-EtM MACs and I'm not aware of
any major distributions that have configured it to do so either.