[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Duplicity-talk] Why -oUserKnownHostsFile=/dev/null
|
From: |
Peter Schuller |
|
Subject: |
[Duplicity-talk] Why -oUserKnownHostsFile=/dev/null |
|
Date: |
Thu, 23 Aug 2007 20:03:06 +0200 |
|
User-agent: |
KMail/1.9.7 |
Hello,
During initial testing of 0.4.3 I noticed that the scp backend is
doing -oUserKnownHostsFile=/dev/null and disabling strict host checking
Why is this? Seems to me it's a pretty significant security issue to not
verify the identity of the remote host.
--
/ Peter Schuller
PGP userID: 0xE9758B7D or 'Peter Schuller <address@hidden>'
Key retrieval: Send an E-Mail to address@hidden
E-Mail: address@hidden Web: http://www.scode.org
- [Duplicity-talk] Why -oUserKnownHostsFile=/dev/null,
Peter Schuller <=