While trying to get openssh to install on my server (I have too little activity to generate any randomness for key generation) I realized that the way we redistribute the OpenSSH package is not a good way. As the host keys are included in Defaults/Settings anyone can pretend to be the packagers server. But without the host keys one can't run sshd. Therefore I think that some sort of action to generate these keys at installation or just a note that this has to be done in order to use sshd should be implemented. This can be used for other apps that need computer specific settings and/or files.
-- /Jonas Using Opera's revolutionary e-mail client: http://www.opera.com/mail/ _______________________________________________ gobolinux-devel mailing list [email protected] http://lists.gobolinux.org/mailman/listinfo/gobolinux-devel
