From cbe658b7ae321dbb265734cb1139d93ca7adaaec Mon Sep 17 00:00:00 2001 From: forest Date: Sun, 31 Jan 2021 02:31:27 -0600 Subject: [PATCH] clarify cloud based use case for hypothetical non-tofu ssh --- capsulflask/templates/about-ssh.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capsulflask/templates/about-ssh.html b/capsulflask/templates/about-ssh.html index 5a9ec65..7247c3a 100644 --- a/capsulflask/templates/about-ssh.html +++ b/capsulflask/templates/about-ssh.html @@ -317,7 +317,7 @@ Host key verification failed.


- Because of the case for absolute simplicity, I think if anything, + Because of the case for absolute simplicity, I think that in a cloud based use-case it might even make sense to remove the TOFU and make the ssh client even less user friendly; requiring the expected host key to be passed in on every command by default would dramatically increase the security of real-world SSH usage.