5 ms·
TOFU is a pretty bad trust model. Even with SSH you're supposed to validate the fingerprint with some already known trusted source. Otherwise you're just assumi
by ziml77 2y ago
TOFU is a pretty bad trust model. Even with SSH you're supposed to validate the fingerprint with some already known trusted source. Otherwise you're just assuming that the first time you connect you aren't being MITMed.
- Spivak 2y agoIn fact the recommended way to do SSH fingerprint checks is with a CA.
- greyface- 2y agoCAs don't make this problem go away; they just shift it to a central "trusted" party. With the CA model, we're assuming that Let's Encrypt isn't being MITMed.
- foul 2y agoAlso we assume no MITM when updating the ca-cert thing on OSes.