To stay inline with crypto best practices, and OpenSSH, we should plan to eventually drop support for DSA keys: https://lwn.net/Articles/958048/ [ED: used to link to a Gentoo news item which now 404s, this LWN article is a good encapsulation and reproduction of the OpenSSH ML post on subject]