[Bug 1839] New: ssh/scp to localhost/127.0.0.1 should not update known_hosts

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Mon Nov 22 01:03:30 EST 2010


https://bugzilla.mindrot.org/show_bug.cgi?id=1839

           Summary: ssh/scp to localhost/127.0.0.1 should not update
                    known_hosts
           Product: Portable OpenSSH
           Version: 5.3p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Miscellaneous
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: dirk at computer42.org


If ssh/scp is used on computers with a shared home directory the
localhost key noted in ~/.ssh/known_hosts is ambiguous.

If the user fist ssh to localhost on host A and afterwards do the same
on host B he is getting an error message.

On the other side the host key for localhost is only a valuable
security enhancement if localhost isn't bound to an uncommon ip number.
(But this should cause a lot of troubles that hits a user before.)

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list