News for hackers. Stuff that matters.
Re:TOTP SSH port fluxing by robryk on Monday May 23, 2016 @05:31AM (#11752756)
Nit: You do not "send your keys" to the SSH server. You only sign a statement using them. The statement contains some session data that is generated by the server and client together while setting up the session; this makes the signature useless for trying to impersonate the client in any future or concurrent connections.

There are no comments on this comment yet.