> > +config DROPBEAR_CBC_CIPHERS > > + bool > > + prompt "CBC mode ciphers" > > + default y > > + help > > + Enable CBC mode for ciphers. This has security issues though > > + is the most compatible with older SSH implementations. > > In that case, shouldn't this be off by default? Those that still need it can > enable it.
I was a bit in doubt about ptxdist default policy was to be fairly secure out-of-box or compatible with old software/equipment. I'm all in for pushing a strong default security configuration :) Bruno -- ptxdist mailing list [email protected]
