6 ms·
There are other bad things about ssh. Tofu sucks balls and ssh users are far too comfortable with it.
by fidget 9y ago
There are other bad things about ssh. Tofu sucks balls and ssh users are far too comfortable with it.
- voltagex_ 9y agoHad to look it up. https://en.wikipedia.org/wiki/Trust_on_first_use https://en.wikipedia.org/wiki/Trust_on_first_use What would you replace it with?
- transitorykris 9y agoSigned keys. Here's an example of how to do it from Digital Ocean: https://www.digitalocean.com/community/tutorials/how-to-create-an-ssh-ca-to-validate-hosts-and-clients-with-ubuntu https://www.digitalocean.com/community/tutorials/how-to-crea...
- arghwhat 9y agoWell, feel free to come up with a better solution. 3rd party trust roots are way worse.
- madmulita 9y agoThe server key can be signed by a trusted authority, no need to trust on first use.