‹ BackHN Continuity

Thread

Show HN: ssh ssh.place

184 points · 120 comments · jeninh

  1. raggi · · focus · HN ↗
    Time for your regular reminder that ssh has no PKI and is trivial to mitm during tofu.
    1. rvz · · focus · HN ↗
      Agreed. Amid all this hype, once again we continue to see such disregard for basic security implications and using ssh outside it's intended use-case; especially sshing into random servers.

      Now we wait for the discovery of an RCE, key leakage vulnerability or a security bypass that leads to a trivial mitm attack to magnify why ssh apps make no sense security wise.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.