undefined | Better HN

0 pointsahazred8ta1y ago0 comments

Try comparing P2P OTR E2EE vs Non-CA TOFU SSH

0 comments

Any app capable of installing a TLS CA is capable of writing to known_hosts (or authorized_keys, while we're at it).

hell, even I don't know what the "words" you just used mean!

That got me too for a few seconds whilst my brain cogs whirred... but the latter sounds tastier than the former for some reason!

For those wondering:

  P2P OTR E2EE == Peer to Peer, Off The Record, End to End Encryption
  Non-CA TOFU SSH == Non-Certificate Authority, Trust On First Use, Secure SHell

j / k navigate · click thread line to collapse

0 comments

yjftsjthsd-h1y ago

Any app capable of installing a TLS CA is capable of writing to known_hosts (or authorized_keys, while we're at it).

dylan6041y ago

hell, even I don't know what the "words" you just used mean!

iam-TJ1y ago

That got me too for a few seconds whilst my brain cogs whirred... but the latter sounds tastier than the former for some reason!

For those wondering:

  P2P OTR E2EE == Peer to Peer, Off The Record, End to End Encryption
  Non-CA TOFU SSH == Non-Certificate Authority, Trust On First Use, Secure SHell

j / k navigate · click thread line to collapse