Live data from Hacker News

OpenSSH 10.4/10.4p1 Released

openssh.org

11–20 of 25 posts

Re: OpenSSH 10.4/10.4p1 Released

#11
post #5

HTML version of release notes: * https://www.openssh.org/releasenotes.html#10.4

Still looks like ascii, doesn’t automatically wrap, nor is it responsive. Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

What “responsive” mean here?

Re: OpenSSH 10.4/10.4p1 Released

#12
post #5

Earlier quoted context omitted.

Still looks like ascii, doesn’t automatically wrap, nor is it responsive. Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

What “responsive” mean here?

Narrower windows will adjust the layout of the page to be more easily accessible for narrower devices like phones. This is a css feature and does not require JavaScript or similar.

In the context of the linked site which manually uses line breaks this won’t work well aside from fixing the scroll overflow, the text is small on my iPhone when zoomed out to show the full line width. A fix is better than nothing but does not perfectly fix the issue.

Re: OpenSSH 10.4/10.4p1 Released

#13
post #3

Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default. When pq key agreement was added in 2019, it took almost 3 years for it to become enabled by default. This isn't criticism, just an observation. I don't have a pressing need for pq sigs. Always happy for new OpenSSH releases though!

I recently added ml-dsa-44 to solokeys, both piv and fido2. To my understanding ssh+fido2 doesn’t support pq yet, but if anybody’s reading and knows how to make it happen, I’d be really interested.

Re: OpenSSH 10.4/10.4p1 Released

#14
post #5

Earlier quoted context omitted.

Still looks like ascii, doesn’t automatically wrap, nor is it responsive. Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

What “responsive” mean here?

Requiring thousands of node packages to malformat text for people who can't be bothered to not use a phone to read a webpage seems to be the common definition of responsive these days.

Re: OpenSSH 10.4/10.4p1 Released

#15
post #5

HTML version of release notes: * https://www.openssh.org/releasenotes.html#10.4

Still looks like ascii, doesn’t automatically wrap, nor is it responsive. Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

I can almost guarantee it would not be an improvement.

Re: OpenSSH 10.4/10.4p1 Released

#16

HTML version of release notes: * https://www.openssh.org/releasenotes.html#10.4

Honestly this just looks like RST markup to me. If you really wanted to format it, I feel like using a previewer for that would basically do the job

Re: OpenSSH 10.4/10.4p1 Released

#17

Earlier quoted context omitted.

What “responsive” mean here?

Narrower windows will adjust the layout of the page to be more easily accessible for narrower devices like phones. This is a css feature and does not require JavaScript or similar. In the context of the linked site which manually uses line breaks this won’t work well aside from fixing the scroll overflow, the text is small on my iPhone when zoomed out to show the full line width. A fix is better than nothing but does…

[flagged]

Re: OpenSSH 10.4/10.4p1 Released

#18

Earlier quoted context omitted.

What “responsive” mean here?

Narrower windows will adjust the layout of the page to be more easily accessible for narrower devices like phones. This is a css feature and does not require JavaScript or similar. In the context of the linked site which manually uses line breaks this won’t work well aside from fixing the scroll overflow, the text is small on my iPhone when zoomed out to show the full line width. A fix is better than nothing but does…

doesn't even need specific CSS rules, just the default. every item needs to be wrapped or even just prefixed with a

or element

Re: OpenSSH 10.4/10.4p1 Released

#19
post #4

Is hmac-sha1 and umac-64 still enabled by default?

Yes: * https://man.openbsd.org/ssh_config.5#MACs * https://man.openbsd.org/sshd_config.5#MACs ETM, encrypt-than-mac, variants are at the front of the preference list. * https://en.wikipedia.org/wiki/UMAC_(cryptography)

That sucks, that means they will still appear in audits, they should remove them from the default.

Re: OpenSSH 10.4/10.4p1 Released

#20
post #5

HTML version of release notes: * https://www.openssh.org/releasenotes.html#10.4

Still looks like ascii, doesn’t automatically wrap, nor is it responsive. Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

To make it worse ? I hope they don't!
Post reply on HN