4 ms·

what other situation would you be in?

• fragmede 3y ago
  Any device where you don't control the initial firmware, and the firmware doesn't support ssh keys. AP/Routers (consumer and commercial and industrial grade), Shared hosting with ssh but limited features (eg GoDaddy)...
  • nine_k 3y ago
    For physical devices, you can usually connect them via a dedicated Ethernet cable right to your laptop, and set the initial password. They likely don't have the right network settings anyway to drop them right into the bigger LAN. Otherwise I think you just prepare a certificate ahead of time, and scp it during the first connection, then immediately disable password-based access, or at least change the password. Any passive eavesdropping still needs to defeat the encryption somehow (no feasible ways are known now), even having seen the initial exchange. If you have an active MITM attack, all bets are off, because the attacker could even grab the image with the pre-baked key you're sending, and copy or change the key. If this is not possible, then the pre-baked key would help. If your security is really important, don't use ther cheap GoDaddy's offerings with limited SSH.
• marginalia_nu 3y ago
  Let's say you bought a router and now you want to log into it.
  • samus 3y ago
    Then you connect physically and do whatever is necessary to prepare that router for your intended use.
    • marginalia_nu 3y ago
      Connect to what? It only has an ethetnet jack.
      • froggit 3y ago
        Are you being intentionally difficult or have you just never bought and set up a router?
      • Filligree 3y ago
        Your laptop, for instance.