Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #12342

D

djm's personal weblog

Personal blog · blog.djm.net.ausecuritysystems

djm's personal weblog is a personal blog at blog.djm.net.au about security and systems. Since 2013, 6 different Hacker News readers have linked it 8 times, most often “ChaCha20 and Poly1305 in OpenSSH”. The last post was in 2015, but the archive is still widely read.

Visit the blog
8mentions?
6HN people?
2013–2016first – last linked?
Links on Hacker News per year · peak 3 in 2014

Too few sampled comments (4) to say how often HN recommends it.?

Why HN links it

Commenters link djm's weblog as a source of detail on OpenSSH features: host key rotation in 6.8+, hostname canonicalisation, and chacha20-poly1305 support. No comment judges the writing itself.

Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Most-linked posts?

  1. ChaCha20 and Poly1305 in OpenSSH
    2 people · 3 mentions · first linked 2013-12-03
  2. Key rotation in OpenSSH 6.8+
    2 people · 2 mentions · first linked 2015-01-31

What Hacker News says?

  1. It does provide host key rotation in OpenSSH 6.8+: http://blog.djm.net.au/2015/02/key-rotation-in-openssh-68.ht...

    Comment linking /2015/02/key-rotation-in-openssh-68.html

    on “Why aren’t we using SSH for everything?”
  2. Submitted Key rotation in OpenSSH 6.8+ as a story · 84 points

    HN discussion
  3. More details on the hostname canonicalisation here: http://blog.djm.net.au/2014/01/hostname-canonicalisation-in-...

    Comment linking /2014/01/hostname-canonicalisation-in-openssh.html

    on “OpenSSH 6.5 Released”
  4. Submitted ChaCha20 and Poly1305 in OpenSSH as a story · 7 points

    HN discussion
  5. OpenSSH also supports chacha/poly1305. http://blog.djm.net.au/2013/11/chacha20-and-poly1305-in-open...

    Comment linking /2013/11/chacha20-and-poly1305-in-openssh.html

    on “TLS Symmetric Crypto”
  6. Submitted Hostkey rotation, redux as a story · 3 points

    HN discussion
  7. Nice work - this solves a common problem. You might consider adding a recommended ssh_config to ensure that host names are canonicalised. This allows FQDNs in certificates to match successfully when users only supply a hostname. More details at http://blog.djm.net.au/2014/01/hostname-canonicalisation-in-...

    Comment linking /2014/01/hostname-canonicalisation-in-openssh.html

    on “Sharkey: a service for managing certificates for use by OpenSSH”
  8. Submitted ChaCha20 and Poly1305 in OpenSSH as a story · 2 points

    HN discussion

Search all of HN for blog.djm.net.au

Linked by the same people?