3 ms·
What you're describing sounds like the way SSH works. Here's some discussion about that (along with its downsides) from the other HTTPS post. http://news.ycomb
by nbpoole 16y ago
What you're describing sounds like the way SSH works. Here's some discussion about that (along with its downsides) from the other HTTPS post.
http://news.ycombinator.com/item?id=2376619 http://news.ycombinator.com/item?id=2376619
- peterwwillis 16y agoSort of. What i'm proposing is a combination of CHAP based on mutual secrets and the host IP and key checks SSH does, and after that PKI. (Though SSH doesn't record the IP address of the destination unless you explicitly use the IP, so the DNS address can still be spoofed)