Host Verification while SSHing


The first time you SSH to a remote host, you need to verify the fingerprint of the host.
```
The authenticity of host 'example.com (1.1.1.1)' can't be established.
ECDSA key fingerprint is SHA256:suhfbwrunauibgsrbgeuygbsltnhubsiff.
Are you sure you want to continue connecting (yes/no)?
```
MITM prevention
------
For MITM prevention, here's how:
1. Local machine cmd:
```bash
ssh -o FingerprintHash=md5 example.com
```

1. Remote host cmd: 
Find a secure way to execute the below codes on your remote host and output host ssh fingerprint.
    * Web console via https. Or
    * Goto physical place of remote host. Or
    * Ask your VPS hoster for the fingerprint.
```bash
ssh-keygen -l -E md5 -f /etc/ssh/ssh_host_ecdsa_key.pub
ssh-keygen -l            -f /etc/ssh/ssh_host_ecdsa_key.pub # if -E option not supported.
```
1. Compare the two fingerprints.



评论

此博客中的热门博文

Windows下ShadowSocks客户端安装和配置 顺带KCP

How to Install KeePass on M1 Mac

How User Friendly is a MacOS