SSH Host Key Verification

I noticed that PhotoBackup does not prompt you to ensure that the SSH host key is correct.  There appears to at least be _some_ skeletal support for them in acrosync, but it doesn't look fleshed out very far.

This seems pretty dangerous and leaves you fully vulnerable to man-in-the-middle attacks.

Are there any plans to fix this?

Comments

  • The host key check was implemented but due to a bug it is not working properly.  I've submitted a new version for review to App Store.

    Thank you for reporting this bug.
  • The new version is now available.  App Store reviews are much faster now.
Sign In or Register to comment.