Disabling host key checking on LAN

Bostjan Skufca bostjan at a2o.si
Fri Aug 28 22:48:09 AEST 2015


On 27 August 2015 at 05:01, Damien Miller <djm at mindrot.org> wrote:
> Yeah, it's unfortunately quite difficult to implement address matching
> in ~/.ssh/config because of the interplay of Host matching, Hostname
> directives, hostname canonicalisation*, proxy commands, hosts having
> multiple addresses, IPv4/IPv6 and when the addresses are actually
> resolved and available to the parser.
>
> I've not figured out a clean way to do it that isn't also complex and
> probably fragile to implement.

If we disregard the "complex and probably fragile" part, what is the
"clean way" you are talking about?
Do you have some sort of RFC written down somewhere?


b.


More information about the openssh-unix-dev mailing list