Jack Dodds

OK - tried it - it works! Thanks! I'd like to simulate a MITM attack (server presents a key that is NOT the one in known_hosts) to see what that looks like to the user. Will take me a while - I don't set up SSH keys often enough to remember the key setup procedure without looking at the docs.

Hello zc2, Thanks for your quick reply! My mistake - you are correct - known_hosts is implemented. I thought it was not because I went to an SFTP server that I thought I had not visited before and did not get a "The autheticity of host *** can't be established" message. Looks like I had in fact visited that host previously so it was a "known_host", hence no message. I confirmed this by uninstalling and reinstalling Ghost Commander - then I was shown the message on my first access. I recognize the...

Hello zc2 I'm using the latest release now and the key fingerprint display seems to no longer be implemented. I notice that there's no longer a separate SFTP plugin - maybe the key fingerprint display got lost in the shuffle. Can we have this back? I'd be willing to put some time into creating the code for a version that also remembers "known hosts" (like command line ssh) but would need some help getting familiar with the code.

Hello zc2 I tried it and it seems to work. I'm using an Asus TF700t running Cyanogenmod 11 which is Android 4.4.4 IIRC. Thank you for doing this.

Hello zc2 - It would be GREAT if you could show the server key fingerprint even if that is all that you do. I would be best to show it BEFORE the password is entered by the user, so that the user can verify the connection to the server is secure before they enter the password.

How to host key fingerprint when connecting

OK, thanks, so the problem is not Enigmail, it is Thunderbird or Linux. I'll look...

I am using Thunderbird/Iceweasel 38.2.1 with Enigmail 1.8.2. When I attach a PGP...