I may be missing something but this seems highly susceptible to man in the middl... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		kolodny on Jan 30, 2015 \| parent \| context \| favorite \| on: Signing in to websites with SSH I may be missing something but this seems highly susceptible to man in the middle attacks

davea37 on Jan 30, 2015 [–]

If the web page was served over HTTPS and provided the SSH server's fingerprint for the user to verify, wouldn't that get around the MITM risk?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact