Commits on Sep 6, 2023

1. default host key policy to RejectPolicy …

   It's a really bad idea to silently accept new keys. It's not how SSH
   works, and it's not how Fabric *should* work. If we'd work like SSH,
   we'd *prompt* the user, but the WarningPolicy doesn't do that, it just
   warns, and doesn't prompt.
   
   At the very least those policies should noisily warn the user when the
   host keys get changed, but that's something Paramiko must do.
   
   An alternative to this would be WarningPolicy but I think it's too
   light and possibly too late: when you warn, Fabric probably has time
   to run the bad stuff before the operator notices and interrupts.

   

   anarcat committed Sep 6, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 083552c
   • Browse repository at this point

   Copy the full SHA

   083552c View commit details

   Browse the repository at this point in the history