Top all-time · #12342
djm's personal weblog
Personal blog · blog.djm.net.ausecuritysystems
djm's personal weblog is a personal blog at blog.djm.net.au about security and systems. Since 2013, 6 different Hacker News readers have linked it 8 times, most often “ChaCha20 and Poly1305 in OpenSSH”. The last post was in 2015, but the archive is still widely read.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
Commenters link djm's weblog as a source of detail on OpenSSH features: host key rotation in 6.8+, hostname canonicalisation, and chacha20-poly1305 support. No comment judges the writing itself.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- ChaCha20 and Poly1305 in OpenSSH2 people · 3 mentions · first linked 2013-12-03
- Key rotation in OpenSSH 6.8+2 people · 2 mentions · first linked 2015-01-31
What Hacker News says?
It does provide host key rotation in OpenSSH 6.8+: http://blog.djm.net.au/2015/02/key-rotation-in-openssh-68.ht...
Comment linking /2015/02/key-rotation-in-openssh-68.html
on “Why aren’t we using SSH for everything?”Submitted Key rotation in OpenSSH 6.8+ as a story · 84 points
HN discussionMore details on the hostname canonicalisation here: http://blog.djm.net.au/2014/01/hostname-canonicalisation-in-...
Comment linking /2014/01/hostname-canonicalisation-in-openssh.html
on “OpenSSH 6.5 Released”Submitted ChaCha20 and Poly1305 in OpenSSH as a story · 7 points
HN discussionOpenSSH also supports chacha/poly1305. http://blog.djm.net.au/2013/11/chacha20-and-poly1305-in-open...
Comment linking /2013/11/chacha20-and-poly1305-in-openssh.html
on “TLS Symmetric Crypto”Submitted Hostkey rotation, redux as a story · 3 points
HN discussionNice work - this solves a common problem. You might consider adding a recommended ssh_config to ensure that host names are canonicalised. This allows FQDNs in certificates to match successfully when users only supply a hostname. More details at http://blog.djm.net.au/2014/01/hostname-canonicalisation-in-...
Comment linking /2014/01/hostname-canonicalisation-in-openssh.html
on “Sharkey: a service for managing certificates for use by OpenSSH”Submitted ChaCha20 and Poly1305 in OpenSSH as a story · 2 points
HN discussion