I have read and understand the posting from here, https://security.stackexchange.com/questions/39756/secure-configuration-of-ciphers-macs-kex-available-in-ssh. However, I would like to know what the
/etc/sshd_config configuration would look like should I want to accomplish the following goals:
- Disable any 96-bit HMAC Algorithms
- Disable any MD5-based HMAC Algorithms
Would it be the following?
Note that this question is looking for the configuration setting(s) needed; and not reasons, rationale, or discussion of why this may or may not be a good idea.