Thread

1. raggi · 1785729033 · focus · HN ↗

   Time for your regular reminder that ssh has no PKI and is trivial to mitm during tofu.

   1. pzacik · 1785731703 · focus · HN ↗

      Yes, but what exactly would an attacker achieve by doing mitm here?

      1. raggi · 1785740428 · focus · HN ↗

         here, less than most, but look for ssh agents

         on terminal.shop, steal credit cards on jobs endpoints, perform identity theft on exe.dev, whatever you put on there

Unofficial Hacker News client; not affiliated with Y Combinator.