2 ms·
Fingerprint caching seems insecure when you think about it, yet we're all okay with maintaining our servers with this in place. You're supposed to use out of b
by forgottenpass 12y ago
Fingerprint caching seems insecure when you think about it, yet we're all okay with maintaining our servers with this in place.
You're supposed to use out of band methods to verify the host key before approving it.
- josho 12y agoYes, you are supposed to. But, do you know anyone/any organization that actually does this? I don't.
- forgottenpass 12y agoI'm well aware people tend not to practice security hygiene when it comes to SSH. I do, I have friends that do and friends that don't. While I acknowledge it's burdensome and the process could probably be streamlined, it's not my problem.