Subject: install/21627: ssh fingerprints for cvs servers needed
To: None <>
From: None <>
List: netbsd-bugs
Date: 05/20/2003 09:11:45
>Number:         21627
>Category:       install
>Synopsis:       ssh fingerprints for cvs servers needed
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    install-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue May 20 13:14:00 UTC 2003
>Originator:     Steven M. Bellovin
>Release:        NetBSD 1.6.1_RC2
AT&T Labs Research
System: NetBSD 1.6.1_RC2 NetBSD 1.6.1_RC2 (BERKSHIRE.nosound) #9: Tue Mar 4 09:42:32 EST 2003 i386
Architecture: i386
Machine: i386
	We need to publish the ssh fingerprints of all of our CVS
	servers.  Someone connecting has no way to verify that they're
	reaching the right server.  I suggest that the file be on
	the NetBSD web site (linked-to from everywhere that talks about
	anonymous CVS over ssh), *plus* on all distribution CDs, which
	means that they should be in the installation sets.