Re: Ssh MITM attack when using tor

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Ssh MITM attack when using tor
From: "Bryan Fordham" <bfordham@xxxxxxxxx>
Date: Fri, 2 Feb 2007 16:05:40 -0500
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Fri, 02 Feb 2007 16:05:49 -0500
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=AJWXzPOs4EtDV6I89qY6nVP6dUbjOEx6eN/v0+j3t9UcXrwnN7Nnjmg23UR3RwPPNpDTZF2Bs9GzLjqB7+XfYkPxyXfaMCd6ZQ4yEIKgABevgcgkF1qwGrBNSsvcm5MeaLE3FsnmZA9MtdmjrP+V6RLAIiZyinEPhsS9smA37E4=
In-reply-to: <45C3A777.6070407@scs.carleton.ca>
References: <7i1wl8l5l3.fsf@lanthane.pps.jussieu.fr> <45C3A777.6070407@scs.carleton.ca>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On 2/2/07, James Muir <jamuir@xxxxxxxxxxxxxxx> wrote:

Just curious -- how does ssh inform you that a man-in-the-middle (i.e.
the exit node) is trying to victimize you?

ssh complains that the server's key has changed. I've had it happen a few times

References:
- Ssh MITM attack when using tor
  - From: Juliusz Chroboczek
- Re: Ssh MITM attack when using tor
  - From: James Muir