When connecting to a host through SSH for the first time I get met with the message:
Authenticity of host ***** can't be established. ECDSA key fingerprint is SHA256 *******. Are you sure you want to continue to connect? (yes/no/[fingerprint]).
I'm trying to understand a safe way for a client to verify a host's fingerprint.
When connecting with SSH, a client recieves the fingerprint, but for the client to be able to verify that the fingerprint indeed belongs to the host, the host should also share that fingerprint in another channel.
What standards does the security community use for securely sharing fingerprints?