← Back to context

Comment by ahazred8ta

1 year ago

Try comparing P2P OTR E2EE vs Non-CA TOFU SSH

3 comments

ahazred8ta

Reply
yjftsjthsd-h  1 year ago

Any app capable of installing a TLS CA is capable of writing to known_hosts (or authorized_keys, while we're at it).

dylan604  1 year ago

hell, even I don't know what the "words" you just used mean!

  • iam-TJ  1 year ago

    That got me too for a few seconds whilst my brain cogs whirred... but the latter sounds tastier than the former for some reason!

    For those wondering:

      P2P OTR E2EE == Peer to Peer, Off The Record, End to End Encryption
  Non-CA TOFU SSH == Non-Certificate Authority, Trust On First Use, Secure SHell