sshconfig-lint
Weak or deprecated algorithm
← All checksA cipher, MAC, key exchange, or signature algorithm is outdated.
Why it matters
Legacy algorithms can reduce connection security and may disappear from future OpenSSH versions.
How to fix it
Remove the flagged algorithm from the comma-separated list. Prefer deleting the whole Ciphers, MACs, KexAlgorithms, or HostKeyAlgorithms directive so OpenSSH can use its maintained defaults; keep a narrowly scoped exception only for a legacy host you cannot upgrade.
Before and after
Host legacy Ciphers aes256-gcm@openssh.com,3des-cbcHost legacy Ciphers aes256-gcm@openssh.com