3 ms·
Unless you've gotten anoncvs.ca.openbsd.org's host key fingerprint through some secure mechanism (say... HTTPS), SSH only encrypts the transport. It does nothin
by schmichael 10y ago
Unless you've gotten anoncvs.ca.openbsd.org's host key fingerprint through some secure mechanism (say... HTTPS), SSH only encrypts the transport. It does nothing to stop a MITM (eg a malware injecting proxy).
- OrpheanBeholder 10y agoGet the host fingerprints over TLS then? https://www.openbsd.org/anoncvs.html https://www.openbsd.org/anoncvs.html
- jlgaddis 10y agoIn which case ISTM that they could have just enabled HTTPS on www.openssh.com and saved us a few steps.