axw/pushy — Issue #2: missing host key should raise exception by default
Author: axw
Created: 2012-02-07 15:00:13+00:00
State: open
Labels: Critical, Fix Released

Pushy configures Paramiko with the "AutoAddPolicy", which opens users to "man in the middle" attacks. This was fine when Pushy was used only by me, in a controlled network, but needs to be changed now. It should be configurable, with the default to reject.