2 ms·
Known_hosts works by having a list of trusted public keys. The TLS equivalent is adding the endpoint's TLS cert to your local trust store.
by freeone3000 6y ago
Known_hosts works by having a list of trusted public keys. The TLS equivalent is adding the endpoint's TLS cert to your local trust store.
- labawi 6y agoThat's not equivalent and easily dangerous. Random server's TLS cert could be a wildcard or even a CA, which you should not add to your trust store with a single click. The certificate needs to be either restricted to specific domains (preferable) or validated to make sure there aren't any suspicious attributes (seems easy to get wrong or reject many certificates).