Hi Atsuhiko, In your response to my question "how do you get rid of the popup?" you referred me to the URL: ttp://www.jcraft.com/jsch/examples/KnownHosts.java. In that source it hashes the host names, but there is no explanation of why. I normally think of hashing as a way to speed up lookups. The web page you reference below explains why.
What I meant in my email was I think you should put an item in the FAQ: - Hash the host names in the known hosts file to help prevent Island Hopping attacks, see http://itso.iu.edu/Hashing_the_OpenSSH_known__hosts_File. By the way, can the JSch code use the ~/.ssh/known_hosts file, that is, share it with SSH? I did not want the JSch and SSH to interfere with each other, so I have the JSch code its own known hosts file. On my Windows latptop I use PuTTy to ssh (http://www.chiark.greenend.org.uk/~sgtatham/putty/), can JSch share the known hosts file with PuTTy? -Sam -----Original Message----- From: Atsuhiko Yamanaka [mailto:[email protected]] Sent: Wednesday, November 24, 2010 9:11 PM To: Quiring, Sam Cc: [email protected] Subject: Re: [JSch-users] Establish authenticity of remote host Hi, +-From: "Quiring, Sam" <[email protected]> -- |_Date: Mon, 22 Nov 2010 07:04:30 -0800 _____________ | |I am curious, why would you hash the host names? What is the advantage? What do you mean 'hash the host names' in this context? Do you mean ... http://itso.iu.edu/Hashing_the_OpenSSH_known__hosts_File Sincerely, -- Atsuhiko Yamanaka JCraft,Inc. 1-14-20 HONCHO AOBA-KU, SENDAI, MIYAGI 980-0014 Japan. Tel +81-22-723-2150 +1-415-578-3454 Skype callto://jcraft/ Twitter: http://twitter.com/ymnk ------------------------------------------------------------------------------ Increase Visibility of Your 3D Game App & Earn a Chance To Win $500! Tap into the largest installed PC base & get more eyes on your game by optimizing for Intel(R) Graphics Technology. Get started today with the Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs. http://p.sf.net/sfu/intelisp-dev2dev _______________________________________________ JSch-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jsch-users
