X.509 support in ssh (revisited)

[Dan Kaminsky]

> > Okay... maybe someone has upgrade OpenSSH on the system and generated a
> > new hostkey.  How can you tell?
>
> well, there is no need to generate a new hostkey after an upgrade
> of ssh. not even after an upgrade of the system.

We really need a ./configure --with-upgrade to set all paths correctly such
that this occurs more then one out of a hundred times.

In theory, theory is no different than practice.  In practice, it is.

--Dan