Hi Kees, Jamie, DDs, I am looking at hosts that are runing other linuxen that may have weak keys now, or see those weak keys uploaded inadvertently in the future. Is there a straightforward way to get hosts that are !(Debian|Ubuntu) to use that blacklist? PermitBlacklistedKeys support in openssh-server seems to be a Debian/Ubuntu patch (and can't even find a mention of it in the changelog). cheers, m --