-
Notifications
You must be signed in to change notification settings - Fork 62
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SSH connection: Ask user before connection to unknown host/add host to known_hosts. #486
Conversation
Codecov Report
@@ Coverage Diff @@
## master #486 +/- ##
==========================================
- Coverage 98.98% 98.82% -0.17%
==========================================
Files 54 54
Lines 3847 3908 +61
Branches 928 933 +5
==========================================
+ Hits 3808 3862 +54
- Misses 27 34 +7
Partials 12 12
Continue to review full report at Codecov.
|
… denies the remote key and thus the connection
… first test, that took hours ...
What:
known_hosts
RejectPolicy()
instead ofAutoAddPolicy()
Why:
AutoAddPolicy()
is insecure because of Man in the middle attacks.How:
openssh
lib approach.Checklist: