Tag hostkeys

Syncplify Devs
November 24, 2023

Syncplify Server! v6.2.18 released

Importance of this update: NORMAL

What’s changed?

On new installs the setup process does not create an RSA host key anymore, upgrades and restores from backups will not remove your existing RSA keys though
The repairhttp command-line verb now uses better defaults for HTTPS/WebClient! configuration
Better HTTPS/WebClient! default values are also used now when creating a new Virtual Site
Fixed the list of host key algorithms returned to SSH/SFTP clients, now it won’t include algorithms for keys your server doesn’t have
Upgraded the compiler to the most recent version to capture several fixes and improvements in its standard library

Leave a comment InRelease Notes Syncplify Server! WebClient!

Syncplify Devs
November 20, 2023

This is why you should use RSA host keys carefully, or just stop using them altogether

An extremely interesting research paper published in 2023 by Keegan Ryan, Kaiwen He, George A. Sullivan, and Nadia Heninger, mathematically proves yet another weakness with RSA keys – often used as host keys by/for SSH/SFTP servers – and this time it has to do with the way they are generated.

Without delving into the math itself, which is not the purpose of this blog, we would like to take this occasion to advise our customers to use stronger keys, like ECDSA or Ed25519, instead of RSA for their host keys.

Leave a comment InSyncplify Server!