Hacker News new | ask | show | jobs
by ahazred8ta 697 days ago
Try comparing P2P OTR E2EE vs Non-CA TOFU SSH
2 comments

Any app capable of installing a TLS CA is capable of writing to known_hosts (or authorized_keys, while we're at it).
hell, even I don't know what the "words" you just used mean!
That got me too for a few seconds whilst my brain cogs whirred... but the latter sounds tastier than the former for some reason!

For those wondering:

  P2P OTR E2EE == Peer to Peer, Off The Record, End to End Encryption
  Non-CA TOFU SSH == Non-Certificate Authority, Trust On First Use, Secure SHell