Strength and Weakness of Methods to Confirm SSH Host Key

2014-09-22 Thread John Leo
Monkeysphere (advice from maxigas) verify your SSH key through the OpenPGP web of trust Strength: OpenPGP is cool if you REALLY know how to use it. Weakness: vote counting scheme does not sound too cool. use of an organization's own HTTPS site (advice from Stephanie Daugherty) In my personal

Re: [FD] SSH host key fingerprint - through HTTPS

2014-09-02 Thread John Leo
over TOFC, particularly when more robust alternatives (MonkeySphere, signed host keys, use of an organization's own HTTPS site) exist and are clearly superior. On Mon, Sep 1, 2014 at 12:41 AM, John Leo john...@checkssh.com mailto:john...@checkssh.com wrote: This tool displays SSH host key

Re: [FD] SSH host key fingerprint - through HTTPS

2014-09-02 Thread John Leo
Nice to hear from you! I can only wish your suggestion is widely implemented. And don't forget those machines without domain. Best Wishes, On 2014-9-2 04:21, Jeroen van der Ham wrote: Hi, On 1 Sep 2014, at 10:43, Stephanie Daugherty sdaughe...@gmail.com wrote: Sure it shows me the

Re: SSH host key fingerprint - through HTTPS

2014-09-02 Thread John Leo
Thanks. Yes, your suggestion is cool. Best Wishes, On 2014-9-1 19:41, Micha Borrmann wrote: Nice tool, but it is also possible, to use DNSSEC to validate SSH fingerprints, which is much more comfortable and more secure. Am 01.09.2014 um 06:41 schrieb John Leo: This tool displays SSH host key

Re: [FD] SSH host key fingerprint - through HTTPS

2014-09-02 Thread John Leo
Personally I feel more comfortable with CA. Best Wishes, On 2014-9-2 02:48, maxigas wrote: From: John Leo john...@checkssh.com Subject: [FD] SSH host key fingerprint - through HTTPS Date: Mon, 01 Sep 2014 12:41:17 +0800 This tool displays SSH host key fingerprint - through HTTPS. SSH is about

SSH host key fingerprint - through HTTPS

2014-09-01 Thread John Leo
This tool displays SSH host key fingerprint - through HTTPS. SSH is about security; host key matters a lot here; and you can know for sure by using this tool. It means you know precisely how to answer this question: The authenticity of host 'blah.blah.blah (10.10.10.10)' can't be established.