From e11da9f4b7e0404790b85bccaac2c2b334c4ca26 Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Sat, 8 Oct 2016 11:51:21 +0200
Subject: TODO: Support better than MD5 hostkey hash (for ssh)

---
 docs/TODO | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'docs')

diff --git a/docs/TODO b/docs/TODO
index 520d0fe25..7d454171d 100644
--- a/docs/TODO
+++ b/docs/TODO
@@ -133,6 +133,7 @@
  17. SSH protocols
  17.1 Multiplexing
  17.2 SFTP performance
+ 17.3 Support better than MD5 hostkey hash
 
  18. Command line tool
  18.1 sync
@@ -864,6 +865,16 @@ that doesn't exist on the server, just like --ftp-create-dirs.
  libcurl's SFTP transfer performance is sub par and can be improved, mostly by
  the approach mentioned in "1.6 Modified buffer size approach".
 
+17.3 Support better than MD5 hostkey hash
+
+ libcurl offers the CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 option for verifying the
+ server's key. MD5 is generally being deprecated so we should implement
+ support for stronger hashing algorithms. libssh2 itself is what provides this
+ underlying functionality and it supports at least SHA-1 as an alternative.
+ SHA-1 is also being deprecated these days so we should consider workign with
+ libssh2 to instead offer support for SHA-256 or similar.
+
+
 18. Command line tool
 
 18.1 sync
-- 
cgit v1.2.3