in reply to How to use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null in Net::SCP::Expect

Doing that is a very bad idea!
  • Comment on Re: How to use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null in Net::SCP::Expect

Replies are listed 'Best First'.
Re^2: How to use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null in Net::SCP::Expect
by jfroebe (Parson) on Jun 05, 2015 at 13:18 UTC

    Generally, I would agree with you however there are some scenarios where it makes sense to do so. It isn't ideal but you have to pick your battles.

    Jason L. Froebe

    Tech Blog

      You are right in that sometimes there is no alternative but to just disable host key checking entirely.

      But in my experience, it is common for people to do that without actually knowing they are ditching the protocol security, just as an easy way to get SSH working.