News for hackers. Stuff that matters.
Re:We updated our RSA SSH host key by nebulous1 on Friday March 24, 2023 @11:25AM (#35290287)
I would have guessed that the significant majority would be using TOFU, but in any case the actual key was leaked so it wouldn't matter which method was used.
Re:We updated our RSA SSH host key by megous on Friday March 24, 2023 @11:33AM (#35290432)
The point is about how much people care, not about whether verification works or not when the key is leaked.
Re:We updated our RSA SSH host key by nebulous1 on Friday March 24, 2023 @11:37AM (#35290488)
> Number of people just not blindly using TOFU with github over ssh must be quite low.

Oh, I missed the "not" the first time I read it, which changed your overall meaning entirely. My bad.

Re:We updated our RSA SSH host key by jessaustin on Friday March 24, 2023 @01:05PM (#35292105)
In this case "not just" would have been more legible than "just not".