2011/2/28, Karl O. Pinc:
> If you want it to be secure you make the knock code a ome-time-pad.

2011/3/1, me:
> If I change the knock ports every time I log in, I should be fine, right?

Nah, still vulnerable to MITM.
Just intercept and stop the knocks from reaching, and replay them yourself.
But it needs to be planned. So it's still worth changing knocks.

Reply via email to