Wed Aug 18 13:10:49 2010pklosek [...] gmail.com - Ticket created
Subject:
Known hosts problem
Date:
Wed, 18 Aug 2010 19:10:18 +0200
To:
bug-Net-SFTP [...] rt.cpan.org
From:
Paweł Kłósek <pklosek [...] gmail.com>
When host keys of the server are changed Net::SFTP simply adds next key to
the .ssh/known_hosts2 and allows to connect. Failsafe would be to raise an
error and disallow a connection. This is a security bug.
Best regards,
pklosek
RT for rt.cpan.org