Host Verification while SSHing
The first time you SSH to a remote host, you need to verify the fingerprint of the host.
```
The authenticity of host 'example.com (1.1.1.1)' can't be established.
ECDSA key fingerprint is SHA256:suhfbwrunauibgsrbgeuygbsltnhubsiff.
Are you sure you want to continue connecting (yes/no)?
```
MITM prevention
------
For MITM prevention, here's how:
1. Local machine cmd:
```bash
ssh -o FingerprintHash=md5 example.com
```
1. Remote host cmd:
Find a secure way to execute the below codes on your remote host and output host ssh fingerprint.
* Web console via https. Or
* Goto physical place of remote host. Or
* Ask your VPS hoster for the fingerprint.
```bash
ssh-keygen -l -E md5 -f /etc/ssh/ssh_host_ecdsa_key.pub
# ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key.pub # if -E option not supported.
```
```
1. Compare the two fingerprints.
评论
发表评论