[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: HashKnownHosts



On Sat, Jul 02, 2005 at 03:05:47PM +0200, Florian Weimer wrote:
> * Marco d'Itri:
> 
> > What is the rationale for changing the default setting?
> 
> Reducing wormability.  I think it's a pretty clever change.

Some of us actually do care what is listed in that file, and edit it
from time to time. Hashing those names makes that much harder -- and
relying on other people's security to increase your own isn't pretty
clever, actually.

-- 
The amount of time between slipping on the peel and landing on the
pavement is precisely one bananosecond



Reply to: