Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Mar 2010 13:14:19 +0100
From:      =?utf-8?Q?Erik_N=C3=B8rgaard?= <norgaard@locolomo.org>
To:        Olivier Nicole <Olivier.Nicole@cs.ait.ac.th>
Cc:        "perryh@pluto.rain.com" <perryh@pluto.rain.com>, "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: [OT] ssh security
Message-ID:  <4BE3E3C6-EE41-426A-AD03-6DF9BDE50DC8@locolomo.org>
In-Reply-To: <201003101059.o2AAxfns092895@banyan.cs.ait.ac.th>
References:  <532b03711003071325j9ab3c98u703b31abdc7ea8fe@mail.gmail.com> <4b960747.T7FO5AkwXJGAGApg%perryh@pluto.rain.com> <201003090848.o298mBSN079005@banyan.cs.ait.ac.th> <4b97392c.O1yEWWCVzta4T7fL%perryh@pluto.rain.com> <201003101059.o2AAxfns092895@banyan.cs.ait.ac.th>

next in thread | previous in thread | raw e-mail | index | archive | help

On Mar 10, 2010, at 11:59, Olivier Nicole  
<Olivier.Nicole@cs.ait.ac.th> wrote:

> Now Diffie-Hellman may help providing the trust for the fingerprint.
>

No it won't. Trust goes either via a trusted third party as in PKI or  
the pgp chain of trust or via direct verification. In the latter case  
if you cannot establish trust, call up the owner to verify his key.

BR erik



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4BE3E3C6-EE41-426A-AD03-6DF9BDE50DC8>