http://qs321.pair.com?node_id=1129198


in reply to Re: How to use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null in Net::SCP::Expect
in thread How to use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null in Net::SCP::Expect

Generally, I would agree with you however there are some scenarios where it makes sense to do so. It isn't ideal but you have to pick your battles.

Jason L. Froebe

Tech Blog

  • Comment on Re^2: How to use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null in Net::SCP::Expect

Replies are listed 'Best First'.
Re^3: How to use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null in Net::SCP::Expect
by salva (Canon) on Jun 05, 2015 at 13:54 UTC
    You are right in that sometimes there is no alternative but to just disable host key checking entirely.

    But in my experience, it is common for people to do that without actually knowing they are ditching the protocol security, just as an easy way to get SSH working.