From 9222daefbc41542854fc96f78a0ee98050ada3de Mon Sep 17 00:00:00 2001 From: forest Date: Sun, 31 Jan 2021 02:13:55 -0600 Subject: [PATCH] fix wording --- capsulflask/templates/about-ssh.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/capsulflask/templates/about-ssh.html b/capsulflask/templates/about-ssh.html index 6c323d6..82b9a4d 100644 --- a/capsulflask/templates/about-ssh.html +++ b/capsulflask/templates/about-ssh.html @@ -317,9 +317,9 @@ Host key verification failed.

Because of the case for absolute simplicity, I think if anything, - it might even make sense to remove the TOFU and make ssh even less user friendly; requiring the + it might even make sense to remove the TOFU and make the ssh client even less user friendly; requiring the expected host key to be passed in on every command would dramatically increase the security of real-world SSH usage. - This might already be possible with SSH client configuration. + This might already be possible with a custom SSH client configuration. In order to make it more human-friendly again while keeping the security benefits, we can create a new layer of abstraction on top of SSH, create regime-specific automation & wrapper scripts.