Comments

You must log in or register to comment.

santorihelix wrote

Just be sure to check (and know beforehand) the signing key of your server so the exit node can't MitM. At first connect you'll get something like

The authenticity of host omecha.info (89.234.176.136)' can't be established.
ECDSA key fingerprint is SHA256:v7u4albDUtGH1EXWEwlt0KnzY9GDY5EqodUymKSbiSw
Are you sure you want to continue connecting (yes/no)?

When you say yes the server will be added to ~/.ssh/known_hosts so from then on ssh has you covered; that is, it'll error if the pubkey doesn't match the one saved in your file.

1

boobs wrote

someone can correlate your connection to your real identity if you use the same public key as you do without tor.

2