4 ms·
I think the main problem is that there are a lot of SSH servers already deployed without using the CA approach and migrating HostKeys is a pain without causing
by petrosagg 12y ago
I think the main problem is that there are a lot of SSH servers already deployed without using the CA approach and migrating HostKeys is a pain without causing horrible warnings to the clients.
Take GitHub for example. If this feature was mainstream they would be able to phase out their DSA key without people noticing.