On Tue, 14 Apr 2020 at 13:48, Alan Altmark <alan_altm...@us.ibm.com> wrote:

> Further, there’s no
> equivalent of “certificate validation.”
>

Well, there’s the knownhosts file, but more tempting to ignore and override
than what browsers do now. You can however train the configuration to use
an LDAP registry to hold both user public key and host keys, and make it
harder to bypass that.

Rob

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to