| Age | Commit message (Expand) | Author |
|---|
| 2018-04-09 | the UseLogin option was removed, so remove it here too. | T.J. Townsend |
| 2018-02-16 | stop loading DSA keys by default, remove sshd_config stanza and manpage | Damien Miller |
| 2017-03-14 | Mark the sshd_config UsePrivilegeSeparation option as deprecated, | Damien Miller |
| 2016-08-15 | Catch up with the SSH1 code removal and delete all mention of | Christian Weisgerber |
| 2016-07-11 | obsolete note about fascistloggin is obsolete. ok djm dtucker | Ted Unangst |
| 2016-02-17 | make sandboxed privilege separation the default, not just for new | Damien Miller |
| 2015-08-06 | add prohibit-password as a synonymn for without-password, since the | Theo de Raadt |
| 2015-07-30 | change default: PermitRootLogin without-password | Theo de Raadt |
| 2015-04-27 | Make sshd default to PermitRootLogin=no; | Damien Miller |
| 2015-02-02 | increasing encounters with difficult DNS setups in darknets has | Theo de Raadt |
| 2014-01-10 | the /etc/ssh/ssh_host_ed25519_key is loaded by default too | Damien Miller |
| 2013-10-29 | shd_config PermitTTY to disallow TTY allocation, mirroring the | Damien Miller |
| 2013-09-07 | Remove commented-out kerberos/gssapi config options from sample config, | Stuart Henderson |
| 2013-05-16 | Add RekeyLimit to sshd with the same syntax as the client allowing rekeying | Darren Tucker |
| 2013-02-06 | Change default of MaxStartups to 10:30:100 to start doing random early | Darren Tucker |
| 2012-10-30 | new sshd_config option AuthorizedKeysCommand to support fetching | Damien Miller |
| 2012-07-10 | Turn on systrace sandboxing of pre-auth sshd by default for new installs | Damien Miller |
| 2012-04-12 | mention AuthorizedPrincipalsFile=none default | Damien Miller |
| 2012-04-12 | VersionAddendum option to allow server operators to append some arbitrary | Damien Miller |
| 2011-05-23 | allow AuthorizedKeysFile to specify multiple files, separated by spaces. | Damien Miller |
| 2011-05-06 | clarify language about overriding defaults. bz#1892, from Petr Cerny | Darren Tucker |
| 2010-09-06 | add ssh_host_ecdsa_key to /etc; from Mattieu Baptiste <mattieu.b@gmail.com> | Christian Weisgerber |
| 2009-10-08 | disable protocol 1 by default (after a transition period of about 10 years) | Markus Friedl |
| 2008-07-02 | increase default size of ssh protocol 1 ephemeral key from 768 to 1024 | Damien Miller |
| 2008-05-08 | Make the maximum number of sessions run-time controllable via | Damien Miller |
| 2008-05-07 | push the sshd_config bits in, spotted by ajacoutot@ | Pierre-Yves Ritschard |
| 2008-02-08 | add sshd_config ChrootDirectory option to chroot(2) users to a directory and | Damien Miller |
| 2007-08-23 | Support "Banner=none" to disable displaying of the pre-login banner; | Damien Miller |
| 2007-03-19 | Disable the legacy SSH protocol 1 for new installations via | Damien Miller |
| 2006-07-19 | Add ForceCommand keyword to sshd_config, equivalent to the "command=" | Darren Tucker |
| 2005-12-06 | Add support for tun(4) forwarding over OpenSSH, based on an idea and | Reyk Floeter |
| 2005-07-25 | add a new compression method that delays compression until the user | Markus Friedl |
| 2005-05-19 | whitespace nit, from grunk AT pestilenz.org | Damien Miller |
| 2004-12-23 | bz #898: support AddressFamily in sshd_config. from peak@argo.troja.mff.cuni.cz | Damien Miller |
| 2004-05-23 | Add MaxAuthTries sshd config option; ok markus@ | Darren Tucker |
| 2003-12-29 | KeepAlive has been obsoleted, use TCPKeepAlive instead; markus@ OK | Todd C. Miller |
| 2003-12-23 | implement KerberosGetAFSToken server option. ok markus@, beck@ | Jakob Schlyter |
| 2003-09-29 | GSSAPICleanupCreds -> GSSAPICleanupCredentials | Markus Friedl |
| 2003-08-28 | remove kerberos support from ssh1, since it has been replaced with GSSAPI; | Markus Friedl |
| 2003-08-22 | support GSS API user authentication; patches from Simon Wilkinson, | Markus Friedl |
| 2003-08-13 | remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@, | Markus Friedl |
| 2003-07-23 | remove AFS; itojun@ | Markus Friedl |
| 2003-06-20 | sync some implemented options; ok markus@ | Damien Miller |
| 2003-06-02 | deprecate VerifyReverseMapping since it's dangerous if combined | Markus Friedl |
| 2002-09-25 | sync LoginGraceTime with default | Markus Friedl |
| 2002-08-21 | change LoginGraceTime default to 1 minute; ok mouring@ markus@ | Kevin Steves |
| 2002-07-30 | add PermitUserEnvironment (off by default!); from dot@dotat.at; ok provos, de... | Markus Friedl |
| 2002-06-20 | add Compression | Markus Friedl |
| 2002-06-20 | refer to config file man page | Kevin Steves |
| 2002-05-15 | re-enable privsep and disable setuid for post-3.2.2 | Markus Friedl |
