2 ms·
Reading the comments here, I can see several things GitHub could have done to improve the security around their host key. But pragmatically speaking, any change
by CGamesPlay 4y ago
Reading the comments here, I can see several things GitHub could have done to improve the security around their host key. But pragmatically speaking, any change involves changing the host key, which is an extremely disruptive operation. Now that they've bit the bullet and forced everyone to rotate, are they going to use this time to actually generate a new, secured key that never touches persistent memory unencrypted?
- lrvick 4y agoOf course not. This is Microsoft we are talking about. If they did something that expensive for security they would be bragging about it from their blog to earn any possible trust they could at a time when they could really use it. If you are reading this Microsoft, make me look silly. Please. I will even give you the enclave designs for free.