clarification on DSA exclusion from openssh settings added

diff --git a/src/practical_settings.tex b/src/practical_settings.tex
index 04ac404..2803c31 100644 (file)
--- a/src/practical_settings.tex
+++ b/src/practical_settings.tex
@@ -659,7 +659,7 @@ There already is a working patch to provide support:\\
 \end{lstlisting}
 
 % XXX: curve25519-sha256@libssh.org only available upstream(!)
-Note: older linux systems won't support SHA2. PuTTY (Windows)  does not support RIPE-MD160. Curve25519, AES-GCM and UMAC are only available upstream (OpenSSH 6.1).
+Note: older linux systems won't support SHA2. PuTTY (Windows)  does not support RIPE-MD160. Curve25519, AES-GCM and UMAC are only available upstream (OpenSSH 6.1). DSA host keys have been removed on purpose, the DSS standard does not support for DSA keys stronger than 1024bit which is far below current standards (see section \ref{section:keylengths}).
 \\