自動更新を自作した話 — 署名の設計と、PowerShell のパイプで鍵が壊れた事件
https://falledcan.net/blog/posts/pwvault-auto-update
#PwVault #自動更新 #Ed25519 #GitHub #Actions #PowerShell
@falledcan.bsky.socialExplore
@falledcan.bsky.social
@hugovalters.bsky.socialPin Ed25519 host keys, drop RSA/DSA from SSH negotiation. sshd picks the first mutually supported algo in KEXINIT, so ordering matters. Config for OpenSSH 8.5+: https://www.valtersit.com/vault/enforce-ed25519-host-keys-and-disable-weak-rsadsa-algorithms-90789a/ #ssh #crypto #ed25519