Skip to content

#677 - Add explicit ciphers, kex and mac algorithms.#689

Open
alitheg wants to merge 1 commit intomainfrom
ssh_security_config
Open

#677 - Add explicit ciphers, kex and mac algorithms.#689
alitheg wants to merge 1 commit intomainfrom
ssh_security_config

Conversation

@alitheg
Copy link
Contributor

@alitheg alitheg commented Feb 17, 2026

I've created a PR for this one as I wanted to validate the choices. I tried to follow the defaults (which are slightly more broad than the original suggestion in #677) because that way we maintain the same compatibility we have today, however for the key exchange algorithms, the asyncssh module checks to see which capabilities are available and changes some of those defaults dynamically. We could do that checking ourselves but that feels unnecessary to me unless we specifically want to allow some of those options - hence please let me know what if any you'd like to add or remove from these lists!

@alitheg alitheg requested review from dave2wave and sbp February 17, 2026 11:02
@alitheg alitheg force-pushed the ssh_security_config branch from a94451d to 1c982ca Compare February 17, 2026 11:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant