hardening guides for Debian12

[vot4anto]

I applied the recommendations for Debian 12 that I found at the following address: https://www.ssh-audit.com/hardening_guides.html

However, I still have these messages:

# algorithm recommendations (for OpenSSH 9.2)
(rec) !diffie-hellman-group-exchange-sha256 -- kex algorithm to change (increase modulus size to 3072 bits or larger) 
(rec) -curve25519-sha256                    -- kex algorithm to remove 
(rec) -curve25519-sha256@libssh.org         -- kex algorithm to remove 
(rec) -diffie-hellman-group16-sha512        -- kex algorithm to remove 
(rec) -diffie-hellman-group18-sha512        -- kex algorithm to remove 

Even with these recommendations, can I consider the daemon configuration optimal?

And on the hardening_guides.html is missing Debian13

[perkelix]

The hardening guide is out of sync with what ssh-audit currently recommends.