3 ms·
Maybe because of the PKI features of SSL? For instance...with an SSH client, the first time you contact a new server you're asked to verify the remote host's i
by sigil 15y ago
Maybe because of the PKI features of SSL?
For instance...with an SSH client, the first time you contact a new server you're asked to verify the remote host's identity. I bet most of us just blindly type 'y' at this point despite the security implications. On the other hand, with SSL, you can have the server cert signed by a CA the client trusts.
- packetslave 15y agoOpenSSH supports PKI-based authentication and server certificate signing as of 5.4. Very useful in big enterprises and higher-security environment. http://blog.habets.pp.se/2011/07/OpenSSH-certificates http://blog.habets.pp.se/2011/07/OpenSSH-certificates
- sigil 15y agoVery cool, thanks for the info.