Skip to content

Document HuggingFace's SSH fingerprints #1198

Closed
@ikmckenz

Description

@ikmckenz

Doc request
When first connecting to HuggingFace over SSH to do a git clone of a model, I get the classic message:

The authenticity of host 'hf.co (34.198.14.237)' can't be established.
ED25519 key fingerprint is SHA256:dVjzGIdV7d6cwKIeZiCoRMa2gMvSKfGZAvHf4gMiMao.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

And after connecting, the key entry in my known_hosts file looks like:

hf.co ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINJjhgtT9FOQrsVSarIoPVI1jFMh3VSHdKfdqp/O776s

Searching around, I can't easily find HF's SSH fingerprints publicly documented to verify them. It would be nice to be able to verify them.

Additional context
GitHub's SSH key fingerprints are publicly documented here, for a comparison: https://docs.github.com/en/enterprise-cloud@latest/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions