Further to fully disabling DSA keys, would it be wise to disable the use and generation of DSA host keys by default? Matthew W. S. Bell