easy-admin
easy-admin copied to clipboard
SSH: Discontinue use of P256 part of ECDSA
During server algorithm key exchange (KEX) neogitation, The NIST P256 part of ECDSA should be avoided.
Instead, recommends ecdh-sha2-nistp521 ecdh-sha2-nistp384
This author leans toward avoidance of P384 as penalty cost of P521 is minimal and only during key exchange. No citation.