logoalt Hacker News

raggitoday at 3:50 AM1 replyview on HN

Time for your regular reminder that ssh has no PKI and is trivial to mitm during tofu.


Replies

pzaciktoday at 4:35 AM

Yes, but what exactly would an attacker achieve by doing mitm here?