We should also offer at least one of the rsa-sha2-512 and rsa-sha2-256 host key algorithms rather than just ssh-rsa. This doesn't require changing the host key itself.
We should also offer at least one of the rsa-sha2-512 and rsa-sha2-256 host key algorithms rather than just ssh-rsa. This doesn't require changing the host key itself.