]> arthur.barton.de Git - ax-zsh.git/commit
ssh_secure: Don't alias "ssh" to "ssh -o 'StrictHostKeyChecking yes'
authorAlexander Barton <alex@barton.de>
Thu, 20 Aug 2015 13:18:19 +0000 (15:18 +0200)
committerAlexander Barton <alex@barton.de>
Thu, 20 Aug 2015 13:18:19 +0000 (15:18 +0200)
commit7af1a2e598f36ffb5182621e3b5e31874079ac6b
tree366da3cf843b375ab32815744cccca18f8b6509b
parent4115e06b7b2d6807df50abe8164875d7712b8aa1
ssh_secure: Don't alias "ssh" to "ssh -o 'StrictHostKeyChecking yes'

Creating this alias prevents the user from overwriting this for certain
hosts in his ~/.ssh/config file.

You should add something like the folloging to you ~/.ssh/config file
to make ssh more secure by default:

    # Trusted test network with changing hosts
    Host *.example.net
        StrictHostKeyChecking no
        UserKnownHostsFile /dev/null

    # Be more secure by default!
    Host *
        CheckHostIP yes
        StrictHostKeyChecking yes
plugins/ssh_secure/ssh_secure.zshrc