Host key trust
Fingerprints, approval, and what a mismatch means.
First contact
The first time you connect to a server, ServerAlyzer shows the SHA-256 fingerprint of the server's host key. Compare it with the one your server reports (for example via ssh-keygen -lf on the server) and approve it only if it matches.
Mismatch = blocked
If the fingerprint later changes, ServerAlyzer blocks the connection. A mismatch usually means the server was reinstalled or its keys rotated, but it can also mean interception, which is why the block is not skippable from the connection flow.
After a legitimate key change
If you know the change is legitimate (reinstall, key rotation), remove the stored trust for that server and connect again to approve the new fingerprint.
