Web lists-archives.com

Re: salsa SSH fingerprint

On Thu, 2018-03-01 at 13:40 +0800, Paul Wise wrote:
> On Wed, Feb 28, 2018 at 11:23 PM, Alberto Luaces wrote:
> > Great! After passing those keys trough `ssh-keygen -lf`, I get the
> > confirmation I was  looking for.
> Why do you need ssh-keygen when you can just add the ssh key to your
> known_hosts file?

One way to add the key to the known_hosts is to say "yes" when ssh asks
you if the fingerprint matches and that command shows you the
fingerprint for you to match the one ssh prints against. Perhaps a bit
roundabout compared with just appending the key to the file, but not at
all unreasonable IMHO, and certainly better practice than saying yes
without checking.