Debian Developers - Re: new host key?: Re: compromise of gluck.debian.org, lock down of other debian.org m

Author

Re: new host key?: Re: compromise of gluck.debian.org, lock down of other debian.org m

Russ Allbery

2006-07-30, 7:30 am

Osamu Aoki <osamu@debian.org> writes:

> PS: It would have been nicer if old hosk identification was backuped and
> used in new system.

Well, not if the system had a root compromise. The attacker must be
assumed to have the private host key, which means that reusing the same
key would allow them to attack future ssh connections to the system.

--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>

--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org