SSH is not like SSL, for which there is a PKI and CA hierarchy to verify and revoke keys.
When we try to access the Site5 servers through SSH for the first time, we are asked to confirm the identity of the server (i.e. the SSH fingerprint). The security-conscious among us would be reluctant to blindly accept the fingerprint as authentic.
Does Site5 publish a list of the SSH key fingerprint on a page served through HTTPS? It would be nice to at least display, in SiteAdmin -> Programming Center -> SSH / Shell Access, the fingerprint for the server where I am hosted.
Note that this information would be useful for both shell access and SFTP.
Answer #1
Hello,
Thank you for your question!
We currently do not have any listing of SSH fingerprints for our servers.
I will pass your recommendation over to our system team so that they can look into the possibility of adding it.
If you have any other questions, please feel free to reply here or you can speak to our support team directly by opening a ticket through Backstage.
Happy Hosting!