What are some good ways to protect against that?<p>My first thought is to create an entry in my ~&#x2F;.ssh&#x2F;config with an entry for the untrusted host I&#x27;m going to ssh in to, using the &quot;IdentityFile&quot; keyword to point to some bogus&#x2F;misleading identity file.  How does that sound?