TLS and SSH rely on Certificate Authorities (CAs) for authentication, but they also present a vector for Man in the Middle attacks.

[fedora@fosstodon.org]

TLS and SSH rely on Certificate Authorities (CAs) for authentication, but they also present a vector for Man in the Middle attacks. What if you could set up your own CA to reduce your exposure?

️ https://fedoramagazine.org/make-a-private-ca-with-step-ca/

#WebDev #Linux #Security #InfoSec #Cybersecurity #Fedora

[giggls@karlsruhe-social.de]

@fedora Huh? ssh does not use CAs it uses a known_hosts file.

[ben@snac.benbuhse.com]

You can use CAs for SSH, e.g. https://www.lorier.net/docs/ssh-ca.html

CC: @fedora@fosstodon.org

[giggls@karlsruhe-social.de]

@ben @fedora It is possible to do so but this is not the default at least on Debian/Ubuntu based distros. Is this different in Fedora?