Created
January 26, 2017 00:42
-
-
Save elerch/ce8da3077e1d7bc61eea26b7876f8855 to your computer and use it in GitHub Desktop.
Stub for ~/.ssh/config
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Sane security defaults for SSH clients. Disables everything old and nasty. | |
# Explanation: http://mochtu.de/2015/01/06/securing-ssh-connections/ | |
# Background information: https://stribika.github.io/2015/01/04/secure-secure-shell.html | |
# OSX Users: consider updating your openssh version, or you might see an error. | |
Host * | |
KexAlgorithms [email protected],diffie-hellman-group-exchange-sha256 | |
# delete diffie-hellman-group-exchange-sha1 | |
Ciphers [email protected],aes256-ctr,aes192-ctr,aes128-ctr | |
MACs [email protected],[email protected],[email protected],[email protected],hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,[email protected] | |
ServerAliveInterval 120 | |
TCPKeepAlive no | |
#Host example.com other.com | |
# MACs some-other-less-secure-setting-offered-by-your-server |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment