> how do I verify the server is reporting the fingerprint of the actual running code Since this was answered already, I'll just say that I think the bigger pro

> how do I verify the server is reporting the fingerprint of the actual running code Since this was answered already, I'll just say that I think the bigger problem is that we can't know if the machine that replied with the fingerprint from this code is even related to the one currently serving your requests.