Re: Stronger ssh settings

Dag-Erling Smørgrav <[email protected]> Sun, 05 Apr 2026 17:04:32 +0200
Newsgroups gmane.os.freebsd.architechture
Message-ID <[email protected]>
Christian Weisgerber <[email protected]> writes:
> Government standards may require disabling some of the algorithms
> OpenSSH prefers.  That is more likely a disimprovement.  Anyway,
> if people would like example configurations compliant with FIPS or
> such, I don't object.

FIPS compliance requires not only using only approved algorithms, but
also using only approved implementations of those algorithms.  Simply
editing your ssh(d) configuration will not achieve that.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - [email protected]