I noticed that PhotoBackup does not prompt you to ensure that the SSH host key is correct. There appears to at least be _some_ skeletal support for them in acrosync, but it doesn't look fleshed out very far.
This seems pretty dangerous and leaves you fully vulnerable to man-in-the-middle attacks.
Are there any plans to fix this?
Comments