Hacker News Reader

Probably not since replacing the ancient equipment only capable of DSA is likely cheaper than maintaining an OpenSSH fork.

I’m going to assume that the hardware that supports DSA only has long been abandoned by its manufacturer.

View on HN

You'd be suprised, the shear amount of black box vendor nonsense out there borders on astronomical. Weird telco stuff, old cisco hardware, BMCs in servers, it would mean gutting probably millions of dollars of equiment. It's stupid, but throwing the baby out with the bathwater over openssh won't make anyone happy.

Some day that stuff is going to unexpectedly break and cause more problems. There are two choices; pain now when you have a chance to plan, or more pain later when you’re forced to react.

Reply on news.ycombinator.com