[OT] ssh security

[Erik Nørgaard]

On Mar 10, 2010, at 11:59, Olivier Nicole  
<Olivier.Nicole at cs.ait.ac.th> wrote:

> Now Diffie-Hellman may help providing the trust for the fingerprint.
>

No it won't. Trust goes either via a trusted third party as in PKI or  
the pgp chain of trust or via direct verification. In the latter case  
if you cannot establish trust, call up the owner to verify his key.

BR erik