[Nix-dev] SECURITY: default SSH host keys are weak
phreedom at yandex.ru
phreedom at yandex.ru
Fri Aug 23 14:38:55 CEST 2013
В письме от Пятница 23 августа 2013 14:19:49 пользователь Marc Weber написал:
> Or raise an exception unless a new option such as
> allowWeakKeyTypes is set to true.
Can't be done because keys aren't generated during the build time and could
have been inherited from other system in fact.
> There is a way to write assertions, grep for assertion in nixos.
>
> I'd like to to see such issues treated seriously and force the right
> thing unless the admin really opts out.
Thus, I'm giving a short notice to people who don't want surprises and then
the default change will trigger generation of a new key.
More information about the nix-dev
mailing list