I'm attempting to build a global
known_hosts file for my AWS VPC, and was looking at using
ssh-keyscan to acquire the fingerprints of new servers as they are created. The
-H option seems sensible, as it means you
do not reveal identifying information should the file's contents be disclosed
Strangely though, the output of that command comes with a helpful header:
# 126.96.36.199 SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.4
... which seems to rather defeat the point doesn't it? Obviously I can strip that bit out very easily, but having asked for hashing, I'd expect the output to contain only hashed data. Is there some logical reason for this, or is it a bug?