Re: Suggested way to ssh into obsolete devices (with old ssh crypto)?

From	<tomas@tuxteam.de>
Newsgroups	linux.debian.user
Subject	Re: Suggested way to ssh into obsolete devices (with old ssh crypto)?
Date	2021-07-06 22:20 +0200
Message-ID	<CxZHX-AE-1@gated-at.bofh.it> (permalink)
References	(3 earlier) <CxWh3-6Wb-5@gated-at.bofh.it> <CxWK5-7lG-5@gated-at.bofh.it> <CxXmN-7xF-3@gated-at.bofh.it> <CxXG9-7Tg-1@gated-at.bofh.it> <CxXPP-7Ww-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Tue, Jul 06, 2021 at 02:11:21PM -0400, Michael Stone wrote:

[...]

> It's entirely too common for obsolete encryption options that are
> kept for "compatibility" end up being a vector for compromise, and
> entirely reasonable to remove such options in order to provide the
> most secure and maintainable tool for the vast majority of users.

That's the attitude of authoritarian software: "my software is smarter
than you".

The authors are free to hold that position, but so am I to utterly
dislike it.

> If you want ancient crypto options, just run an ancient binary.
> They're very easy to find in archive.debian.org.

They're not as easy to run as soon as they start being outrun by
their dependencie's versions, and you perfectly know that.

> Of course, the real answer is to not purchase products with "secure"
> management that can't be upgraded when it becomes "insecure"
> management.

See above. To me, this is a dangerous antipattern.

Cheers
 - t

Thread

Suggested way to ssh into obsolete devices (with old ssh crypto)? Ralph Aichinger <ra@pi.h5.or.at> - 2021-07-06 11:10 +0200
  Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? "Andrew M.A. Cater" <amacater@einval.com> - 2021-07-06 11:30 +0200
  Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Roberto C. Sánchez <roberto@debian.org> - 2021-07-06 15:00 +0200
    Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 18:10 +0200
      Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? "Andrew M.A. Cater" <amacater@einval.com> - 2021-07-06 18:40 +0200
        Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 19:10 +0200
          Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 19:50 +0200
            Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-06 20:10 +0200
              Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 20:20 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Roberto C. Sánchez <roberto@debian.org> - 2021-07-06 20:20 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 20:40 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-06 22:20 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 22:50 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-06 23:50 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 23:40 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-07 00:00 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-07 05:10 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-07 10:00 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Karen Lewellen <klewellen@shellworld.net> - 2021-07-07 00:00 +0200
            Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 21:30 +0200
              Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 21:30 +0200
  Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Lee <ler762@gmail.com> - 2021-07-07 01:20 +0200

csiph-web