SSH security improvements: Difference between revisions

(→‎Updating your client's known host list: advise ALWAYS CHECK THE FINGERPRINT)
Line 41: Line 41:
You may also get a warning regarding "DNS spoofing", which is related to the same change.
You may also get a warning regarding "DNS spoofing", which is related to the same change.


If you are using MobaXTerm, Putty, or WinSCP as your ssh (or scp) client under Windows, the warning will appear in a pop-up window and will allow you to accept the new host key by clicking "Yes".  '''Only click yes if the fingerprint matches one of the fingerprints listed below for that cluster.'''
=== MobaXTerm, Putty, or WinSCP ===
 
If you are using MobaXTerm, Putty, or WinSCP as your ssh (or scp) client under Windows, the warning will appear in a pop-up window and will allow you to accept the new host key by clicking "Yes".  '''Only click yes if the fingerprint matches one of the fingerprints listed below for that cluster.'''  
 
=== macOS, Linux, GitBash or Cygwin ===


If you are using the command line ssh command on macOS, Linux, GitBash or Cygwin, you should tell your system to "forget" the old host keys, by running the following commands:
If you are using the command line ssh command on macOS, Linux, GitBash or Cygwin, you should tell your system to "forget" the old host keys, by running the following commands:
Bureaucrats, cc_docs_admin, cc_staff
2,879

edits