3 ms·
Fails to mention that you can paste in the expected key. Of course if there is a compromise of the source the key is copied from that no help but that's a high
by erikerikson 1y ago
Fails to mention that you can paste in the expected key. Of course if there is a compromise of the source the key is copied from that no help but that's a higher bar. Still easy and doesn't rely on human frailty.
- jon-wood 1y agoOr you can use SSH certificates, where you work on the basis that if the host key is signed by the correct CA then it's legit. No more tofu required beyond need to trust whatever source you got your CA's public key from.