3 ms·
Not necessarily. It could do key pinning for example, which at least protects already-established users.
by TheLoneWolfling 12y ago
Not necessarily. It could do key pinning for example, which at least protects already-established users.
- mitchty 12y agoAdditionally, if you use gpg to build your ssh keys and have a trust/sign chain you could then pull this stuff with impunity as long as you keep the trust chain issues sorted.