Show SSH host key fingerprint on control panel
I can't find the host key fingerprint anywhere. This makes it impossible to use SSH securely. When connecting for the first time, you'll always get a prompt "The authenticity of host x can't be established, key fingerprint is x". If I blindly type 'yes' without checking the fingerprint, I might be giving away my credentials to a man-in-the-middle.
If the host key fingerprint was shown on cp.ultra.cc, I could use that to make sure that I am talking to ultra.cc and not a man-in-the-middle.
The docs should also be updated to encourage checking the fingerprint. Trust-on-first-use is insecure.
Status: Not Planned
No comments yet
Be the first to share your thoughts.