3 ms·
If a client orders SFTP providing off-band fingerprints is a trivial step.
by anc84 11y ago
If a client orders SFTP providing off-band fingerprints is a trivial step.
- creshal 11y agoIf that client is a single person, sure. If the client is a 500 person organization where half need access to the server, I can see why people would prefer FTPS with a certificate from their internal CA.
- frutiger 11y agoYou can do SSH certificates that can sign and revoke keys. For some reason, most people assume TLS when you mention the word certificate. Read the CERTIFICATES section in ssh-keygen(1).
- creshal 11y agoTrue, but you still need to build your own infrastructure to roll out the CA, vs. X.509, which is implicitly handled by all OSes.