Avoiding SSH key enumeration

[daenney]

Avoiding SSH key enumeration

[FiloSottile]

Just added some similar instructions to the README.

https://github.com/FiloSottile/whosthere#how-do-i-stop-it

[jomo]

You can also set this in your /etc/ssh_config or ~/.ssh/config:

Host *
  IdentitiesOnly yes # only use the authentication identity files configured in the ssh_config files
  User root          # don't send my local username

[vincentbernat]

IdentitiesOnly only prevents identities stored in an agent to be sent. Other identities, notably ~/.ssh/id_* are still sent.

[FiloSottile]

Daaaamn @vincentbernat is right. Updating the README.

[jomo]

Oh well I had my default IdentityFile set to /dev/null

[daenney]

Oh well I had my default IdentityFile set to /dev/null

Ha, I like that one, thanks!