Bug 7616 - Client doesn't verify host IP when establishing SSH connection
Summary: Client doesn't verify host IP when establishing SSH connection
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Client (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: LowPrio
Assignee: Bugzilla mail exporter
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-12-23 13:35 CET by Pierre Ossman
Modified: 2021-03-09 14:18 CET (History)
0 users

See Also:
Acceptance Criteria:


Attachments

Description Pierre Ossman cendio 2020-12-23 13:35:42 CET
OpenSSH has the setting "CheckHostIP" which also checks the IP of the server and not just the host. We disable this feature for unclear reasons (it's been in the client since r6486 from 2005).

It's unclear exactly what benefits, and what problems, we get by enabling this feature. Upstream has it on by default though.

We should investigate this and take a more clear decision what we want.

Note You need to log in before you can comment on or make changes to this bug.