Comment 1 for bug 340490

Hi Erpiu,

I agree this is an important usability issue, but I'm not sure how I feel about your suggested solutions. 0.1.3 goes for the "read the whole file" option, as it's an easy way to work around the issue while we come up with a long-term solution.

With issues that balance security against ease of use, it's very important to get the balance right. It seems to me that any solution should provide an option to get rid of the warning, but should do so in a way that lets the user know how serious and unusual the issue is. What do you think about this idea:

When the assistant spots a bad key, the page changes to show a long warning about bad keys, with a button at the bottom to launch a text editor, editing ~/.remote-help-assistant/known_keys. A series of comment lines at the top of that file will explain how editing the file is a security risk. Once the user has edited the file (perhaps with the help of their friend), they can restart the assistant and try again.