3 ms·

Consider including SSH known hosts in your cfgmgmt. I have all my machines' public keys, and all major git forge's SSH keys in my git-managed cfgmgmt repo. Fo

Consider including SSH known hosts in your cfgmgmt. I have all my machines' public keys, and all major git forge's SSH keys in my git-managed cfgmgmt repo. For NixOS users: https://search.nixos.org/options?channel=23.05&show=programs.ssh.knownHosts https://search.nixos.org/options?channel=23.05&show=programs...

ehPReth 3y ago
one issue is that most hosting providers don't display ssh host keys anywhere in the control panels so unless you have a... lot of fun (and spend time) with the virtual console... (or maybe a custom cloud-init script?) you're SOL for the very very first connection
- rudasn 3y ago
  Isn't more important that the known key does not change unless you made the change, than having the "right" key to begin with?
  - ehPReth 3y ago
    hmmmm... if someone MITMs you the first thing could they 'in theory' just change the key on the host to match the MITM one?