DSA signature support removed from OpenSSH https://undeadly.org/cgi?action=article;sid=20250507010932
Very nice, to me this is a good thing. This prevents some sites javascript via Firefox from getting some ssh information.
FWIW, I believe unveil(2) and pledge(2) is much better than any container type environment out there. I even have the calls in my programs :)