3 ms·
> I think it would probably be better if there was a standard for an out of band way to validate the servers public key. In addition to the mentioned SSHFP rec
by throw0101a 5y ago
> I think it would probably be better if there was a standard for an out of band way to validate the servers public key.
In addition to the mentioned SSHFP record, OpensSSH 8.0 added:
> ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes". This allows the user to paste a fingerprint obtained out of band at the prompt and have the client do the comparison for you.
* https://www.openssh.com/txt/release-8.0 https://www.openssh.com/txt/release-8.0