RSA key generated less than 4096-bit about ssh-hardening HOT 2 CLOSED

Is this related to #6?
At any rate, we have the latest OpenSSH version now, the defaults should be more than fine, with a few arguable exceptions.

from ssh-hardening.

Yes it would relate to #6 (just spotted that branch too). The minimum has since increased from 2048 to 3072 bits, but I believe the standard the SSH Hardening Guides have established, is 4096-bits. The merits of 3072 vs 4096 are perhaps a topic of heavy debate and discussion and likely beyond the scope of my knowledge.

My appeal is more towards aligning with the baseline established by the SSH Hardening Guides, if that's something to be considered.

from ssh-hardening.