Re: [Monotone-devel] opportunistic server keys

[Nathaniel Smith]

On Mon, Dec 27, 2004 at 10:27:33PM -0800, Andy Isaacson wrote:
> Is there any particular reason why monotone can't do the ssh trick of
> "I'm connecting to a server I've never seen before, simply prompt the
> user to see if I should automatically accept its key"?  Out of band key
> management is such a pain.

Simply that it hasn't hit the top of anyone's priority stack.  Patches
welcome.

I have some vague UI preference for separating the operations of "suck in
a key from this server" and "sync with this server", so sync'ing with
a server whose key you don't recognize is a hard error, rather than
ssh's soft error.  I'm not entirely sure, though; I don't entirely
grok what sort of attacks the netsync signing stuff is supposed to
prevent.  (Especially since it, e.g., does not confirm that the key
the server uses is the key that that server is supposed to use.)

-- Nathaniel

-- 
.i dei jitfa fanmo xatra