4 ms·
It still needs to be authenticated. It could be replaced by an attacker public key.
by vbernat 9y ago
It still needs to be authenticated. It could be replaced by an attacker public key.
- pferde 9y agoThis is a scenario where "the humans can speak to each other (directly) but the computers cannot". Key authenticity is not a problem, the other party can verify that the fingerprint is correct.
- Piskvorrr 9y agoTrue, but have you actually tried to verify even a short SSH pubkey over a human communication channel? It can be done, but the horrible, horrible UX!