Simon Tatham 08f1e2a506 Add an option to disable the dynamic host key policy. ...

This mitigates CVE-2020-14002: if you're in the habit of clicking OK
to unknown host keys (the TOFU policy - trust on first use), then an
active attacker looking to exploit that policy to substitute their own
host key in your first connection to a server can use the host key
algorithm order in your KEXINIT to (not wholly reliably) detect
whether you have a key already stored for this host, and if so, abort
their attack to avoid giving themself away.

However, for users who _don't_ use the TOFU policy and instead check
new host keys out of band, the dynamic policy is more useful. So it's
provided as a configurable option.

2020-06-21 16:39:47 +01:00

..

blurb.but

…

chm.css

…

config.but

Add an option to disable the dynamic host key policy.

2020-06-21 16:39:47 +01:00

errors.but

Whitespace rationalisation of entire code base.

2019-09-08 20:29:21 +01:00

faq.but

Whitespace rationalisation of entire code base.

2019-09-08 20:29:21 +01:00

feedback.but

Discourage unnecessary use of Secure Contact key.

2019-11-22 09:21:43 +00:00

gs.but

…

index.but

…

intro.but

…

Makefile

…

man-pag.but

…

man-pg.but

…

man-pl.but

…

man-pscp.but

…

man-psft.but

…

man-ptel.but

…

man-pter.but

…

man-putt.but

…

mancfg.but

…

manpages.but

…

pageant.but

…

pgpkeys.but

…

plink.but

Docs: use less personalised example Windows prompts.

2020-06-21 16:39:47 +01:00

pscp.but

Docs: use less personalised example Windows prompts.

2020-06-21 16:39:47 +01:00

psftp.but

…

pubkey.but

…

site.but

…

sshnames.but

…

udp.but

UDP: the 'mac' directory no longer exists.

2019-04-19 16:11:23 +01:00

using.but

Docs: list SSH specials before Telnet specials.

2019-04-19 16:02:59 +01:00

vids.but

…