3 ms·
For SSH (+SFTP) you are expected/obligated/etc. to have some way to verify the correct host key. There is no relationship to the clusterfudge of public CAs. N
by sk5t 8y ago
For SSH (+SFTP) you are expected/obligated/etc. to have some way to verify the correct host key. There is no relationship to the clusterfudge of public CAs. Nor are there x509 certs.
- hrez 8y agoBut you can't verify it since there is no host key published for sftp service (at least in AWS console).