News for hackers. Stuff that matters.

A comment on Tofu: Do You Check?. Parent comment

Re:Tofu: Do You Check? by fragmede on Friday September 22, 2023 @02:05PM (#37615447)
Especially since they're distributable via DNS. If your server has an entry in DNS, you shouldn't need to confirm host key.
[ Parent | on HN ]
Re:Tofu: Do You Check? by pritambaral on Saturday September 23, 2023 @06:14AM (#37621957)
If the MITM is in the client's LAN, DNS can be spoofed too. A simpler solution would be to just use SSH certs for host keys.
[ Parent | on HN ]