Ask HN: SSH browser traffic?

Posted by a1g on Sunday September 05, 2010 @10:29AM
from the ask-hn dept.

Why not ssh web browser traffic?

Instead of using SSL Certificate Authorities, which can't be fully trusted in the first place.

( 2 comments | 3 points | on HN )

Re:Ask HN: SSH browser traffic? by zerohp on Sunday September 05, 2010 @11:03AM (#1664614)

You could just remove all the CA's from your browser and it would be nearly the same as using SSH. The only thing the CA is doing is answering this question for you:

  The authenticity of host 'x.x.x.x (x.x.x.x)' can't be established.
  RSA key fingerprint is 2f:db:11:aa:b0:13:48:64:50:cc:94:73:7b:aa:57:78.
  Are you sure you want to continue connecting (yes/no)?

Removing CA's without an alternative in place such as Web of Trust means that users have no assurance that the other end of the connection is who it claims to be.

[ Parent | on HN ]

Re:Ask HN: SSH browser traffic? by a1g on Sunday September 05, 2010 @11:04AM (#1664618)

yes, you are correct good sir. I posted this question too early.

[ Parent | on HN ]