More on Data Collection

For each user we collect:

• The anonymized IP address of your host
• An anonymized IP address for each entry of ~/.ssh/known_hosts
• The anonymized IP address of the file server (if any) on which the user's home directory is mounted
• SSH and OS version information.
• A flag that indicates whether private key files are encrypted with pass phrases.
• SHA1 hashes of the public keys in your ~/.ssh/authorized_keys files
• SHA1 hashes of public key files in your ~/.ssh/ directory

The last three items enable us to model how, when a host is compromised, the identity keys stored on it may be used to compromise other hosts.

The README file describes in even greater detail which files collect-ssh reads and how the script encrypts the information it gathers to preserve your privacy.