Subject: for security considerations: smb key fingerprint text.

From: Bill Sommerfeld <[email-masked]>
Date: Thu, 27 Mar 2003 17:02:21 -0500

Steve Bellovin and I came up with:

> 	Server administrators are encouraged to make host key
> 	fingerprints available for checking by some means whose
> 	security does not rely on the integrity of the actual host
> 	keys.  Possible mechanisms include secured Web pages, the DNS
> 	[draft-ietf-secsh-dns], physical pieces of paper, etc.
> 	Implementors should provide recommendations on how best to do
> 	this with their implementation.

If anyone else has thoughts on this, please let the WG know..

						- Bill