[Bug 393] 'known_hosts' file should be indexed by IP:PORT, not just IP

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Sep 11 06:57:56 EST 2002


http://bugzilla.mindrot.org/show_bug.cgi?id=393





------- Additional Comments From carson at taltos.org  2002-09-11 06:57 -------
> what does ip:port mean for hostbased authentication?

It means nothing. The IP of the host is irrelevant - the name is all that 
matters.

> why does HostKeyAlias not help?

Because it requires touching the config files of every possible user.

> why should i have 10 entries for the hostkey if i run sshd on 10 different
> ports on the same machine?

Because they may not have the same keys. Disk space is cheap. If you really 
want to save disk space, allow a single key to have multiple ip:port indices.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the openssh-unix-dev mailing list