3 ms·
> TOFU is secure if you verify the host key fingerprint against information received via a sufficiently secure channel. Verifying the fingerprint out-of-band i
by rlpb 3y ago
> TOFU is secure if you verify the host key fingerprint against information received via a sufficiently secure channel.
Verifying the fingerprint out-of-band is the opposite of TOFU. TOFU is generally understood to mean not verifying it, but flagging if it changes later.
- gertrunde 3y agoVerifying the fingerprint out-of-band is very much what is meant to happen, but it's like reading the EULA, everyone knows that you should do it, everyone knows that very very few people do.