Hacker News new | past | comments | ask | show | jobs | submit login

Apparently not possible with MITM.

"The authentication of the server host key prevents exploitation by a man-in-the-middle, so this information leak is restricted to connections to malicious or compromised servers."

https://lists.mindrot.org/pipermail/openssh-unix-dev/2016-Ja...




... and those that you haven't established TOFU with yet




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: