I hope we can shoehorn rsa-sha2-256 into working with Yubikeys and other hardware tokens, or else they've just become rather useless.https://twitter.com/juliocesarfort/status/1265541783741706241 …
Show this thread
-
Technically yes, but the deprecation is only for host keys. Keypairs used for auth don't generally have their fingerprint verified. On the other hand, first time attempting a host will ask for manual verification of host key fingerprint.
I thought the problem was the public key signature algorithm itself, not whatever hash you use to compute fingerprints. They clearly said the "rsa-ssh public key signature algorithm" which would include both usages.
-
-
I think it's just very poorly worded. Looking at the commits in question it's just the host keys
-
Sorry, seems I was looking at commits for libssh - but their changes only affect host keys. https://gitlab.com/libssh/libssh-mirror/-/commit/fecdc3cc0e6d051ebbe06414a15c6634a4126a8b …
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.