Secure channels over TCP/IP

Re:Secure channels over TCP/IP by diafygi on Tuesday July 07, 2015 @07:45PM (#9848909)

What advantage does this have over spiped[1]? Since there's not really a good way to distribute public keys, you really need to just put them on a thumb drive and walk them over to the person that wants them. And if you're doing that, you might as well give the person a shared secret.

[1]: https://www.tarsnap.com/spiped.html

[ Parent | on HN ]

Re:Secure channels over TCP/IP by rakoo on Tuesday July 07, 2015 @08:37PM (#9849067)

And the corresponding Go library: https://github.com/dchest/spipe

[ Parent | on HN ]

Re:Secure channels over TCP/IP by aidenn0 on Tuesday July 07, 2015 @10:32PM (#9849451)

The only advantage of public-keys over private that I can think of would be to reduce the number of servers with the private key.

[ Parent | on HN ]

Re:Secure channels over TCP/IP by doomrobo on Tuesday July 07, 2015 @09:15PM (#9849189)

Furthermore, it looks like both of them provide PFS

[ Parent | on HN ]