> most ssh clients will tell you if a certificate changed
Most implementations of ssh in the wild don't use CA (or self) signed certificates. I dont know if Cisco even supports the use of ssh with certificates.
Most implementations of ssh in the wild don't use CA (or self) signed certificates. I dont know if Cisco even supports the use of ssh with certificates.
They do -- in addition to public key auth, as GhettoMaestro mentioned.