3 ms·
This isn’t true: because the secret never leaves your client machine, mitm attacks can’t be trivially leveraged to access other systems you have access to.
by fiddlerwoaroof 6y ago
This isn’t true: because the secret never leaves your client machine, mitm attacks can’t be trivially leveraged to access other systems you have access to.
- gruez 6y agoIsn't that what I said? How are you going to get access to other machines if each machine has a unique password?
- fiddlerwoaroof 6y agoSorry, missed that: the problem with a password is that, it the session is mitmed, your password is compromised and the person running the attack can login to the machine whenever they want. ssh keys prevent this attack: mitm only grants access for the duration of the session.