diff --git a/capsulflask/templates/about-ssh.html b/capsulflask/templates/about-ssh.html index 5a9ec65..7247c3a 100644 --- a/capsulflask/templates/about-ssh.html +++ b/capsulflask/templates/about-ssh.html @@ -317,7 +317,7 @@ Host key verification failed.


- Because of the case for absolute simplicity, I think if anything, + Because of the case for absolute simplicity, I think that in a cloud based use-case it might even make sense to remove the TOFU and make the ssh client even less user friendly; requiring the expected host key to be passed in on every command by default would dramatically increase the security of real-world SSH usage.