4 ms·
> Why are yours changing every day? Nobody knows how the hell the host keys are generated in the first place. Don't worry about it. > And then I know exactly
by otabdeveloper4 1y ago
> Why are yours changing every day?
Nobody knows how the hell the host keys are generated in the first place. Don't worry about it.
> And then I know exactly why it changed.
Really? What is a "full" reinstall as opposed to a "non-full" reinstall, and how much exactly reinstall do I need for my host keys to change?
- rcxdude 1y agothe only time the host keys should change is if you a) delete them (either by wiping the whole machine or just deleting the files), or b) explicitly regenerate them. If they're changing for any other reason you're doing something weird.
- BenjiWiebe 11mo agoOr they're getting MITM'd repeatedly by multiple different attackers...
- otabdeveloper4 11mo agoProbably not. MITM pretty much never happens in the real world.
- otabdeveloper4 11mo agoI don't think anybody actually generates host keys by hand. It's always some sort of "automation" script in your OS or SSH implementation.
- BenjiWiebe 11mo agoA system upgrade reinstalls every package, but does not regenerate host keys (Fedora). A full reinstall is wiping the drive completely, and running the installer from a LiveCD/LiveUSB. Nothing is retained, and new host keys are generated. If my host keys were changing regularly, I would worry about it. There's no legitimate reason for that to be happening, since I'm not regularly wiping the drive and reinstalling, nor am I regularly manually deleting the host keys (the other way they get regenerated).