Post-quantum Page Documentation Update

zzq1015
Sun, 17 Aug 2025 15:05:42 -0000

Hi,

So on the https://www.openssh.com/pq.html page -> the FAQ -> "I
received a warning from ssh that directed me to this page. What should
I do?" section, the example configuration should be, according to the
documentation (https://man.openbsd.org/ssh_config.5):

Match host unsafe.example.com
    WarnWeakCrypto no-pq-kex

"no-pq-kex" means to disable PQ-related warnings, while "no"
disables
every warning. In the future, more warnings on weak crypto could be
introduced. Currently, the best approach is to disable only PQ-related
warnings, while still allowing other weak crypto warnings, which is
consistent with the text above.

Best regards,
Sam