[kwlug-disc] Tightening up SSH
adamglauser at gmail.com
Mon Jul 19 10:34:16 EDT 2010
On 19/07/2010 10:26 AM, John Van Ostrand wrote:
> If you are ever prompted with the "host has changed is key" message, think twice about accepting the connection. It's probably just an IP change, or an SSH re-install, but stop and think first.
Of course you are right John. I should have been more clear about that.
If the "host key mismatch" message ever comes up, one should be
absolutely sure of the reason before continuing. This is the main
defense against man-in-the-middle attacks in the SSH protocol.
More information about the kwlug-disc_kwlug.org