[ssh_x509] future release artefacts - without implementation difference

[ssh_x509 at roumenpetrov.info]

Hello,

OpenBSD team starts to add more and more functionality unrelated to 
secure shell.
After permanent rejection to implement some firewall related 
functionality recent release surprisingly adds 'per source penalties'. 
Why? It is quite easy to implement such functionality based on iptables. 
Rules are set dynamically and is up to you to decide to log or 
not(preferred).
Instead external flexibility 'per source penalties' implementation is 
hard-coded into program. For sure it works but it seems to me system log 
will be flooded. And this is main reason do not attempt to port to PKIX-SSH.


Side effect of such refused useless functionality is increase of 
differences between PKIX-SSH and OpenSSH.


Conclusion - do not create and publish "diff-file" between PKIX-SSH and 
OpenBSD releases.


Regards,
Roumen


FYI:
size
1770763 pkixssh-15.0.tar.gz
1213672 pkixssh-15.0.tar.xz
1239003 openssh-9.7p1+x509-15.0.diff.gz

1755581 pkixssh-14.4.2.tar.gz
1204492 pkixssh-14.4.2.tar.xz
1243845 openssh-9.6p1+x509-14.4.2.diff.gz