Re: ECDSA key fingerprint for anoncvs.netbsd.org?

[Thomas Klausner <wiz%gatalith.at@localhost>]

On Thu, May 09, 2024 at 02:06:52PM -0500, J. Lewis Muir wrote:
> On 05/09, Thomas Klausner wrote:
> > In the NetBSD base system, they are in /etc/ssh/ssh_known_hosts.
> > If you're not running (the latest) NetBSD, you can check them here:
> > 
> > http://cvsweb.netbsd.org/bsdweb.cgi/src/etc/ssh/ssh_known_hosts?only_with_tag=MAIN
> 
> Thanks for that!
> 
> Unfortunately, that's not available via HTTPS, so I could still be
> vulnerable to a MITM attack. :-(
> 
> I guess I could download a signed NetBSD base tarball or something, but
> that's not very convenient....

You could try the NetBSD github mirror:

https://github.com/NetBSD/src/blob/trunk/etc/ssh/ssh_known_hosts
 Thomas