Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The threat model SSHFP protects against from is some adversary that's in the middle of you and the server (not close to you or the server). It does nothing against an evil ISP or evil AP, which FTPS (with CA signed certificates) does protect you against.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: