dotfiles/auto/ssh/config

Host *
	ForwardX11Trusted no
	HashKnownHosts no
	IdentitiesOnly yes
Add: automatic configuration script 2022-10-22 07:19:35 +00:00			`Host *`
			`ForwardX11Trusted no`
SSH: HashKnownHosts=no HashKnownHosts provides an appearance of security but is actually [easily crackable](https://github.com/chris408/known_hosts-hashcat) and doesn't prevent leakage from other sources, such as the shell history or SSH config. Most importantly, it makes properly maintaining the list tedious and error-prone by making it hard to remove changed keys and impossible to remove obsolete entries, therefore possibly weakening security. Security should be enforced by password-protecting SSH keys instead. 2022-10-22 07:20:12 +00:00			`HashKnownHosts no`
Add: automatic configuration script 2022-10-22 07:19:35 +00:00			`IdentitiesOnly yes`