[Bug 203939] Re: ssh does not give option to trust on changed keys

[Colin Watson]

I suspect that this is at least in part deliberate, and I at least am
absolutely not comfortable with changing this. Offering a simple option
to ignore the error makes it seem safe to do so - even if you warn,
people will still say "yeah, whatever, just let me in". In fact, unless
you have good knowledge that the machine's circumstances have changed,
ssh's prompt means that the target machine *may have been DNS-
compromised* and it may be *dangerous* to just blaze on through
regardless.

I realise that for people who reinstall machines frequently this is an
inconvenience (although see the advice Darren gave you on the upstream
bug report), but given the fairly well-understood effects of providing
"ignore this security warning" buttons, I don't think that outweighs
safety.

-- 
ssh does not give option to trust on changed keys
https://bugs.launchpad.net/bugs/203939
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.