Skip to content

Instantly share code, notes, and snippets.

@tankmek
Created June 3, 2018 20:55
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tankmek/f4f4e9bcceb4e7a95e48c9e8d4f78974 to your computer and use it in GitHub Desktop.
Save tankmek/f4f4e9bcceb4e7a95e48c9e8d4f78974 to your computer and use it in GitHub Desktop.
More secure key exchange algorithms, ciphers and message authentication codes. Less secure choices are disabled. MITM could enable weak choices if not disabled.
# Manpage excerpt:
# Since the first obtained value for each parameter is used, more host-specific
# declarations should be given near the beginning of the file, and general defaults at the end.
Host *
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-ripemd160-etm@openssh.com,umac-128-etm@openssh.com
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment