Server: diffie-hellman-group14-sha256

[B-Interactive]

For server config, just noting, that the key exchange algorithm diffie-hellman-group14-sha256 is listed as being present in the "Comparative table: Default vs. Hardened" under Hardened config, but it hasn't been included as a key exchange algorithm in the supplied command.

[jlduran]

Thank you! It shouldn't be on the hardened side of the table indeed:

# algorithm recommendations (for OpenSSH 9.3)
(rec) -diffie-hellman-group14-sha256        -- kex algorithm to remove