OpenSSH 10.4/10.4p1 Released
38 points
4 hours ago
| 3 comments
| openssh.org
| HN
Panino
4 hours ago
[-]
Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

When pq key agreement was added in 2019, it took almost 3 years for it to become enabled by default. This isn't criticism, just an observation. I don't have a pressing need for pq sigs. Always happy for new OpenSSH releases though!

reply
throw0101a
2 hours ago
[-]
> Among other changes 10.4 adds post-quantum keys (composite ML-DSA 44 and Ed25519), not enabled by default.

The draft was only published a few months ago:

* https://datatracker.ietf.org/doc/draft-miller-sshm-mldsa44-e...

The draft is a 'personal document', so not associated with the IETF/WG.

reply
throw0101a
4 hours ago
[-]
HTML version of release notes:

* https://www.openssh.org/releasenotes.html#10.4

reply
atonse
2 hours ago
[-]
Still looks like ascii, doesn’t automatically wrap, nor is it responsive.

Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

reply
liuchao-001
2 minutes ago
[-]
It is vintage style. I actually love it a lot.
reply
ninjin
17 minutes ago
[-]
Well, you can have a look at the commit history to see what changes have been accepted in the past:

https://github.com/openbsd/www/commits/master

My experience is that minor improvements tend to get accepted if they come with a solid technical motivation. If the change is simply justified by "best practices" and is rather large, then the conservative choice of just leaving things as they are usually prevail.

For example, I think I have seen two proposals for major overhauls of the OpenBSD.org homepage by "outsiders" over the last three years or so and they were both rejected. However, as you can see by the commit log, minor improvements (including presentation ones) happen all the time.

reply
rovr138
1 hour ago
[-]
https://www.openssh.org/releasenotes.html#10.4

    <!--
        DO NOT EDIT MANUALLY!  This is generated from:
        www/build/openssh/releasenotes.html.head
        www/build/openssh/releasenotes.html.tail
        
        See comments in www/build/openssh/Makefile for details.
    -->
reply
lousken
3 hours ago
[-]
Is hmac-sha1 and umac-64 still enabled by default?
reply
throw0101a
2 hours ago
[-]
reply