Tag

host-key-verification

Safeguard articles tagged "host-key-verification" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

npm ssh2-sftp-client: Security Review and Safe Usage

ssh2-sftp-client wraps the ssh2 library in a promise-based SFTP API. Its security posture rests on host key verification and credential handling, which are easy to get wrong.

Jul 1, 20255 min read