Re:We updated our RSA SSH host key
by nebulous1 on Friday March 24, 2023 @11:25AM
(#35290287)
I would have guessed that the significant majority would be using TOFU, but in any case the actual key was leaked so it wouldn't matter which method was used.
[ Parent
| on HN ]
The point is about how much people care, not about whether verification works or not when the key is leaked.
> Number of people just not blindly using TOFU with github over ssh must be quite low.
Oh, I missed the "not" the first time I read it, which changed your overall meaning entirely. My bad.
Re:We updated our RSA SSH host key
by jessaustin on Friday March 24, 2023 @01:05PM
(#35292105)
In this case "not just" would have been more legible than "just not".