Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Trivial but who does that when? I never even learnt what I should compare that with and just accepted everything (and have been safe that way).


The best way to ensure that keys are correct, is to git a file like .ssh/known_hosts2 and add known keys to that file before you connect to the server.

How you get the public key is up to you, but they are located in /etc/ssh/ on the server, or given to you when creating the server.

ssh-keyscan can scan a host and print the keys as well.

If you also add the servers to .ssh/config you also get tab completion.

It takes a bit more job to do, but it feels much safer afterwards, and it's a good routine.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: