The WinSCP documentation on
SSH Algorithms does not explicitly define the signature algorithms that are supported for use during key-based client authentication.
My questions are...
- Is it correct to assume that the algorithms listed under "Hostkey formats" on SSH Algorithms and under "SSH host key algorithms" in
winscp.com /info
covers the signature algorithms for both server authentication using a host key pair and client authentication using an authorized user key pair? If this assumption is correct, then would it be possible to use terminology (such as "signature algorithm") that covers both usages, or make this more clear in some other way?
- Why does SSH Algorithms use the term "Hostkey formats", whereas
winscp.com /info
uses the term "host key algorithms"? I would argue that "algorithm" is the better choice.
- Why can WinSCP modify the order of signature algorithm families using
-rawsettings HostKey=...
but there is no equivalent option for client authentication using an authorized user key pair?