Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
rcxdude
19 days ago
|
parent
|
context
|
favorite
| on:
Do Users Verify SSH Keys? (2011) [pdf]
the only time the host keys should change is if you a) delete them (either by wiping the whole machine or just deleting the files), or b) explicitly regenerate them. If they're changing for any other reason you're doing something weird.
otabdeveloper4
18 days ago
|
next
[–]
I don't think anybody actually generates host keys by hand. It's always some sort of "automation" script in your OS or SSH implementation.
BenjiWiebe
18 days ago
|
prev
[–]
Or they're getting MITM'd repeatedly by multiple different attackers...
otabdeveloper4
18 days ago
|
parent
[–]
Probably not. MITM pretty much never happens in the real world.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: