Subject: Tramp disables important SSH security features
From: Daniel Colascione <[email-masked]>
To: bug-emacs <[email-masked]>
Date: Thu, 06 Nov 2014 00:47:40 +0000
List-Id: <debbugs-submit.debbugs.gnu.org>

Tramp disables SSH host key checks by setting
GlobalKnownHostsFile=/dev/null, UserKnownHostsFile=/dev/null, and
StrictHostKeyChecking=no in its default method configuration. These
settings allow attackers to intercept connections to remote hosts, sniff
passwords, and cause other mischief. I don't think we should ship an
insecure configuration.