Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Very nice tool, I hadn't seen that before thanks!

There should be a service similar to Mozilla's TLS configuration generator[1], but for SSH.

Mozilla does have a wiki page with modern and intermediate SSH configurations[2], but I'm not sure whether the advice is still current, and a configuration generator page would probably be more accessible. I wonder if they would be open to creating one.

[1] https://mozilla.github.io/server-side-tls/ssl-config-generat...

[2] https://wiki.mozilla.org/Security/Guidelines/OpenSSH



Good point about the sshd_config generator. Who knows, people might even use it.

As to the up to dateness of the Mozilla Guidelines: it is not. Just see the entry "UsePrivilegeSeparation sandbox" which has been deprecated since 7.5 [0]

[0] https://www.openssh.com/txt/release-7.5




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: