Re: [python-committers] SSH fingerprint

2013-03-25 Thread Brett Cannon
On Mon, Mar 25, 2013 at 1:26 AM, Ned Deily n...@acm.org wrote: On Mar 24, 2013, at 21:51 , Jeffrey Yasskin jyass...@gmail.com wrote: You missed that ECDSA != DSA. Good! Someone is paying attention. :=) Should we all be preferring one for pydev work? We have new contributors (who don't

Re: [python-committers] SSH fingerprint

2013-03-25 Thread R. David Murray
Note that I believe ECDSA is now the default for host keys for OpenSSH. At the least, my systems (Gentoo) switched to them after an upgrade a a bit a go. --David On Mon, 25 Mar 2013 13:29:48 +0100, Christian Heimes christ...@python.org wrote: Am 25.03.2013 05:51, schrieb Jeffrey Yasskin: You

Re: [python-committers] SSH fingerprint

2013-03-25 Thread Antoine Pitrou
We have new contributors (who don't have a pre-existing key) use RSA: http://docs.python.org/devguide/faq.html#id1 . I was trying to avoid a man-in-the-middle attack by verifying the server's key fingerprint. Those server fingerprints should be documented. Well if a MITM attacker tries to