4 ms·
Thank you for asking serverfault question and writing about it here. When I started to work with EC2 and SSH few years ago I encountered this problem. However
by laegooose 6y ago
Thank you for asking serverfault question and writing about it here.
When I started to work with EC2 and SSH few years ago I encountered this problem. However I was overwhelmed with the stuff I had to do for actual business and had no energy to investigate.
Next question is, how do we protect against this attack without waiting for few minutes and making all those clicks to find the fingerprints every time we launch an instance?
- MaxBarraclough 6y agoSomeone mentioned SSH certificates. My understanding is that it's the 'proper' solution, but is more work to set-up. Whether it's worth it will presumably be a question of scale.