SSH Before the first connection the client must: recover the server's public key eventually make deposit its public key on the server At each connection the client always must: force a strict check of the server's key mandatory condition for a password authentication