heroku / heroku-exec-util

ISC License
2 stars 5 forks source link

Enable checking of the proxy host key in `ssh()` #6

Closed bensymonds closed 4 years ago

bensymonds commented 4 years ago

Checking the host key reduces the chances of person-in-the-middle attacks. We store the proxy key in a temporary file to allow it to be passed into the ssh command, similar to how it works for the temporary client private key.

Reviewing note (in case it's not obvious): enabling the "Hide whitespace changes" option makes the diff much clearer.

https://gus.my.salesforce.com/a07B00000076l2iIAA