• lurch (he/him)
    link
    fedilink
    English
    23 months ago

    this only works, if the client doesn’t know the server yet or disregards an already known key (you know, like SSH or web browsers telling you the key has changed)

    • @[email protected]
      link
      fedilink
      English
      2
      edit-2
      3 months ago

      I don’t think that browsers do that. There is HSTS but I think that it only checks if the connection is using TLS.