Re: HEADS UP: blacklisting of weak ssh keys

[Aggelos Economopoulos <aoiko@xxxxxxxxxxxxxx>]

On Friday 16 May 2008, Matthew Dillon wrote:
[...]
>     I am downloading the key fingerprings debian published and will run it
>     against all the accounts on leaf, pkgbox, and other machines.

This just in: if you were going to use ssh-vulnkey, debian just announced they 
have been told about (and addressed) another shortcoming of the tool:

http://lists.debian.org/debian-security-announce/2008/msg00155.html

Aggelos