In order to reduce the vulnerability to a Man-in-the-Middle attach, ElasticFox should ssh directly to the instance's public IP address rather than the public DNS name. See http://developer.amazonwebservices.com/connect/thread.jspa?messageID=89862#89862