unofficial mirror of bug-gnu-emacs@gnu.org 
 help / color / mirror / code / Atom feed
* bug#18967: Tramp disables important SSH security features
@ 2014-11-06  0:47 Daniel Colascione
  2014-11-06 12:05 ` Ted Zlatanov
  0 siblings, 1 reply; 13+ messages in thread
From: Daniel Colascione @ 2014-11-06  0:47 UTC (permalink / raw)
  To: 18967

[-- Attachment #1: Type: text/plain, Size: 354 bytes --]

Tramp disables SSH host key checks by setting
GlobalKnownHostsFile=/dev/null, UserKnownHostsFile=/dev/null, and
StrictHostKeyChecking=no in its default method configuration. These
settings allow attackers to intercept connections to remote hosts, sniff
passwords, and cause other mischief. I don't think we should ship an
insecure configuration.


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

^ permalink raw reply	[flat|nested] 13+ messages in thread

end of thread, other threads:[~2016-12-21 11:44 UTC | newest]

Thread overview: 13+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-11-06  0:47 bug#18967: Tramp disables important SSH security features Daniel Colascione
2014-11-06 12:05 ` Ted Zlatanov
2014-11-06 16:58   ` Daniel Colascione
2014-11-06 20:59     ` Ted Zlatanov
2014-11-06 23:39     ` Stefan Monnier
2014-11-07  7:56       ` Michael Albinus
2016-12-13  1:12         ` Glenn Morris
2016-12-13  8:36           ` Michael Albinus
2016-12-13 20:04             ` Glenn Morris
2016-12-18  8:51               ` Michael Albinus
2016-12-19 17:02                 ` Glenn Morris
2016-12-19 18:37                   ` Michael Albinus
2016-12-21 11:44                     ` Michael Albinus

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).