Changes between Version 2 and Version 3 of faq/security/fingerprints


Ignore:
Timestamp:
May 14, 2008, 10:23:32 AM (12 years ago)
Author:
Jamie McClelland
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • faq/security/fingerprints

    v2 v3  
    11= What's a Fingerprint? =
     2
     3IMPORTANT: Due to a security problem with the way keys were generated, most host keys are being updated the week of 2008-05-14! That means when you connect to a server that has been updated, you may get a warning that the host key has changed. Be sure to check the current host key fingerprint (see below) to ensure that the connection is secure.
    24
    35The first time you connect to one of our servers using an ssh-based connection (either via [wiki:sftp SFTP] or [wiki:secure_shell ssh]), your client program should warn you that you are connecting to a server that you have never connected to before. This warning is important! You do not want to risk connecting to the wrong server, because you will essentially be handing this server your username and password.
     
    911Before the host key, you may see numbers like "1024" or "2048"; these numbers indicate the length of the key, but are not part of the key itself.
    1012
    11 {{{
    12 viewsic.mayfirst.org: 1a:b7:72:b5:5f:a5:fc:73:a5:4c:f7:e8:33:80:5b:33
    13 chavez.mayfirst.org: 6d:c8:59:bb:b9:c6:43:70:2d:b7:99:fa:a0:26:be:0d
    14 malcolm.mayfirst.org: 90:1a:5a:21:3a:c9:c3:24:b4:96:3f:59:3e:ee:c5:ea
    15 mandela.mayfirst.org: 91:43:95:42:ea:a9:c6:43:fc:08:0e:2d:8f:8a:fa:13
    16 }}}
     13To find a fingerprint for a file, [browser:trunk/admin/servers click on the server from our server list] and then click on the fingerprint file.