registry team mailing list archive

["H.-Dirk Schmitt" <dirk@xxxxxxxxxxxxxx>]

Public bug reported:

If ssh/scp is used on computers with a shared home directory the
localhost key noted in ~/.ssh/known_hosts is ambiguous.

If the user fist ssh to localhost on host A and afterwards do the same
on host B he is getting an error message.

On the other side the host key for localhost is only a valuable
security enhancement if localhost isn't bound to an uncommon ip number.
(But this should cause a lot of troubles that hits a user before.)

** Affects: openssh
     Importance: Unknown
         Status: Unknown

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

** Bug watch added: OpenSSH Portable Bugzilla #1839
   https://bugzilla.mindrot.org/show_bug.cgi?id=1839

** Also affects: openssh via
   https://bugzilla.mindrot.org/show_bug.cgi?id=1839
   Importance: Unknown
       Status: Unknown

-- 
ssh/scp to localhost/127.0.0.1 should not update known_hosts
https://bugs.launchpad.net/bugs/678134
You received this bug notification because you are a member of Registry
Administrators, which is the registrant for portable OpenSSH.