14 Sep
2020
14 Sep
'20
2 p.m.
I am in favor of doing a key sync as this would be the least intrusive for the user point of view. Having the SSHFP is a good measure and improves security far more than the issue of having the key synchronized. On 1 Aug 2020, at 15:09, Jeremy Stanley <fungi@yuggoth.org> wrote:
An alternative would be to sync the Gerrit mina-sshd API and system OpenSSH host keys, though that could present a degradation of security for the base system (maybe effectively not one we care about though?).