Differences between revisions 27 and 28
Revision 27 as of 2018-07-17 12:51:49
Size: 1119
Editor: misticat
Comment:
Revision 28 as of 2018-07-17 12:52:35
Size: 1142
Editor: misticat
Comment:
Deletions are marked like this. Additions are marked like this.
Line 12: Line 12:
==== The website ====

SSH Fingerprints Website

If you're connecting the first time to a SSH Server you will perhaps get an alert message. The fingerprint should also be shown right below the message.

Windows

alert.jpg

Linux

linux.jpg

The website

You can check if the fingerprint is correct with this website (https://ssh-fingerprints.ee.ethz.ch/).

The website contains the SSH fingerprints of every SSH server we manage.

Type in the hostname you want to connect to into the search bar on the top right corner of the website. The host with its fingerprint should now be shown in the table. Compare the fingerprint with the alert message. If it's the same fingerprint as shown then you can safely trust the connection.

There may be a ssh-rsa and a ssh-ed25519 for one host. ed25519 has stronger encryption but ist not yet widely supported.

Example for bad connection

notsamev2.png

As you can see the name and the IP address is the same but the ssh key is not. You should not only check the hostname but also the IP address and fingerprint.

SshFingerprints (last edited 2020-09-09 11:45:20 by bonaccos)