title: Is man-in-the-middle attack a security threat during SSH authentication using keys?
body: <p>I am no expert in network security, so pardon if this question is not very smart :).
  I am automating logins to some machines using ssh. I am currently avoiding host-key warnings using <code>StrictHostKeyChecking no</code>.<br>
    I naively understand that someone can impersonate as the server and I risk losing my password to him if that were the case. However, if I am using only public/private Key based authentication ( using <code>PasswordAuthentication no</code> ), can the intruder still cause harm?</p>
  
  <p>So basically, with <code>ssh -o "StrictHostKeyChecking no" -o "PasswordAuthentication no"</code> :</p>
  
  <p>1) Can the intruder decipher my private key?</p>
  
  <p>2) Are there any other security threats?</p>
  
  <p>regards,</p>
  
  <p>JP</p>