<div dir="ltr">I use FreeBSD because it's the base for pfSense and TrueNAS. I don't really do any vanilla BSD installs. Any thoughts on FreeBSD vs OpenBSD?<br>Scott</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Nov 27, 2022 at 9:23 AM Héctor Abreu via Ale <<a href="mailto:ale@ale.org">ale@ale.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I think OpenBSD reputation of being secure is not something of the old days. Security has always been one of the main goals of that project.<div><br></div><div>In recent years I've heard news of malware targeting Windows and Linux, but not OpenBSD.</div><div><br></div><div>I personally use both OpenBSD and Linux because one can not be a full replacement of the other, at least in the scenarios I normally deal with.</div><div><br></div><div>Hector.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">El sáb, 26 nov 2022 a las 19:32, Leam Hall via Ale (<<a href="mailto:ale@ale.org" target="_blank">ale@ale.org</a>>) escribió:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Jim, I have to apologize for a mistype. My brain was fried from an on-line class, and I meant to ask about Linux and OpenBSD.<br>
<br>
Though I like your note on OpenSSH, I haven't kept up as much as I should.<br>
<br>
Leam<br>
<br>
On 11/26/22 15:35, Jim Kinney wrote:<br>
> It all depends on the underlying encryption methods and server configuration. As long as the encryption libs are up to date, any known breakable methods explicitly blocked from use, it's solid.<br>
> <br>
> That said, 1024 bit keys should be replaced last year, 2048 are a minimum, and 4096 but causes problems with older versions.<br>
> <br>
> Each distro builds it's own openssh so there are variations that may bite later. I'm particularly fond of the patch that can query ldap through sssd for a users pub key. It also supports being a container for the priv key so a tight control of a closed environment can exist with sssd, ldap, and openssh by using a tool chain through freeipa.<br>
> <br>
> On Sat, Nov 26, 2022, 3:22 PM Leam Hall via Ale <<a href="mailto:ale@ale.org" target="_blank">ale@ale.org</a> <mailto:<a href="mailto:ale@ale.org" target="_blank">ale@ale.org</a>>> wrote:<br>
> <br>
> In days of old, OpenSSH had a reputation for being "more" secure. However, Linux has gotten a lot more brain share, and I wonder if that reputation is still deserved. Thoughts?<br>
> <br>
> Leam<br>
> <br>
> -- <br>
> Automation Engineer (<a href="http://reuel.net/resume" rel="noreferrer" target="_blank">reuel.net/resume</a> <<a href="http://reuel.net/resume" rel="noreferrer" target="_blank">http://reuel.net/resume</a>>)<br>
> Scribe: The Domici War (<a href="http://domiciwar.net" rel="noreferrer" target="_blank">domiciwar.net</a> <<a href="http://domiciwar.net" rel="noreferrer" target="_blank">http://domiciwar.net</a>>)<br>
> General Ne'er-do-well (<a href="http://github.com/LeamHall" rel="noreferrer" target="_blank">github.com/LeamHall</a> <<a href="http://github.com/LeamHall" rel="noreferrer" target="_blank">http://github.com/LeamHall</a>>)<br>
> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a> <mailto:<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a>><br>
> <a href="https://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">https://mail.ale.org/mailman/listinfo/ale</a> <<a href="https://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">https://mail.ale.org/mailman/listinfo/ale</a>><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo</a> <<a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo</a>><br>
> <br>
<br>
-- <br>
Automation Engineer (<a href="http://reuel.net/resume" rel="noreferrer" target="_blank">reuel.net/resume</a>)<br>
Scribe: The Domici War (<a href="http://domiciwar.net" rel="noreferrer" target="_blank">domiciwar.net</a>)<br>
General Ne'er-do-well (<a href="http://github.com/LeamHall" rel="noreferrer" target="_blank">github.com/LeamHall</a>)<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="https://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">https://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="https://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">https://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div>