Perspectives Improves SSH-style host authentication with multi-path network probing
Download

Perspectives Ranking & Summary

Perspectives Tags

client connect authenticate ssh connection ssh client ssh authentication

Perspectives Description

Improves SSH-style host authentication with multi-path network probing Perspectives is a new approach to help clients securely identify Internet servers in order to avoid "man-in-the-middle" attacks. Perspectives is cheap and simple compared to existing approaches because it will automatically build a robust database of network identities using lightweight network probing by "network notaries" located in multiple vantage points across the Internet. When using SSH to connect to a remote machine, the user often encounters the well known "The authenticity of host 'host.domain.com' can't be established." warning message. Unfortunately, the standard SSH client provides no useful information for you to determine if these warnings are likely to be a real attack, or just a false alarm (i.e., the remote server legitimate change keys).The Perspectives modification to the openSSH client software contacts a set of network notaries to gather information that helps you make a better security decision. NOTE: You will need to also copy two configuration files to the '.ssh' directory in your home directory. The client will not work without these files. The first is notary_list.txt, which contains the IP addresses and public keys of notary servers. The second is client_params.txt, which contains client settings like timeouts and quorum duration.

Perspectives Related Software