Re: Question about automatically adding hostkey for users

From: Richard E. Silverman (slade@shore.net)
Date: 05/30/02 

From: slade@shore.net (Richard E. Silverman)
Date: 30 May 2002 14:27:11 -0400

Why not simply add the host keys to the global known-hosts lists once and
be done with it? Auto-adding the keys leaves you open to
man-in-the-middle attacks and is not something you want to *plan* to use;
it's a compromise feature to be used interactively, and sparingly. 

-- 
  Richard Silverman
  slade@shore.net

Relevant Pages