3 ms·
I would have guessed that the significant majority would be using TOFU, but in any case the actual key was leaked so it wouldn't matter which method was used.
by nebulous1 4y ago
I would have guessed that the significant majority would be using TOFU, but in any case the actual key was leaked so it wouldn't matter which method was used.
- megous 4y agoThe point is about how much people care, not about whether verification works or not when the key is leaked.
- nebulous1 4y ago> Number of people just not blindly using TOFU with github over ssh must be quite low. Oh, I missed the "not" the first time I read it, which changed your overall meaning entirely. My bad.
- jessaustin 4y agoIn this case "not just" would have been more legible than "just not".