Browse Source

clarify cloud based use case for hypothetical non-tofu ssh

forest-wip
forest 12 months ago
parent
commit
cbe658b7ae
  1. 2
      capsulflask/templates/about-ssh.html

2
capsulflask/templates/about-ssh.html

@ -317,7 +317,7 @@ Host key verification failed.
</p>
<hr/>
<p>
Because of the case for absolute simplicity, I think if anything,
Because of the case for absolute simplicity, I think that in a cloud based use-case
it might even make sense to remove the TOFU and make the ssh client even less user friendly; requiring the
expected host key to be passed in on every command by default
would dramatically increase the security of real-world SSH usage.

Loading…
Cancel
Save