Release of OpenSSH 8.8 disables support for rsa-sha digital signatures
The release of OpenSSH 8.8 has been published, an open implementation of the client and server for working with SSH 2.0 and SFTP protocols. The release is notable for disabling the use of RSA key-based digital signatures with SHA-1 hashing ("ssh-rsa") by default. The discontinuation of support for "ssh-rsa" signatures is due to the increasing effectiveness of collision attacks with a predefined prefix (the cost of finding a collision is estimated at around $50,000). For […]
