News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by pabs3 on Saturday March 30, 2024 @05:52AM (#39873349)
TLS Client Certs (aka mTLS) is an option for that, but the browser UI stuff for it is terrible and getting worse.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by doubled112 on Saturday March 30, 2024 @08:14AM (#39874105)
I couldn’t imagine trying to train the general public to use mTLS and deploy that system.

I’m not even sure it is difficult. Most people I’ve talked to in tech don’t even realize it is a possibility. Certificates are “complicated” as they put it.

[ Parent | on HN ]