Embed Notice

@pymander """Of the roughly 1 billion RSA signatures, about one in a million exposed the private key of the host."""

Still a real danger, but that much is at least a little reassuring.

As for mitigation.... change your hostkey to ECDSA or similar? Granted, that's just as disruptive, but it's disruptive in a way that's communicable and plannable.