Support Host Key verification

Description

When opening a connection to a remote device, we should verify the host key against a known fingerprint. This fingerprint should be stored in metadata. This can be opt-in by not doing a check if no host-key is assigned.

Without host-key checking, we will send the username/password credentials to every host on which the monitor is configured. This could potentially leak the credentials..

Acceptance / Success Criteria

None

Lucidchart Diagrams

Activity

Show:

fooker April 27, 2022 at 7:42 AM

Fixed

Details

Assignee

Reporter

Labels

Story Points

Sprint

Fix versions

Affects versions

Priority

PagerDuty

Created March 29, 2022 at 8:59 AM
Updated June 7, 2022 at 4:51 PM
Resolved April 28, 2022 at 5:09 PM

Flag notifications