New answers tagged

9 votes

Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?

Your question seems to revolve around the idea of mutual authentication between an SSH client and SSH server based on a password. Protocols like PAKE and SRP aim to solve this problem. With PAKE/SRP,...
  • 20.7k
3 votes

Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?

According to this site: The general method is password authentication, which is when the server prompts the client for the password of the account they are attempting to log in with. The password is ...
22 votes
Accepted

Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?

... if I enter my password and the client allows the connection, then it has authenticated the server. Neither password based nor key based authentication of the client against the server will ...
1 vote
Accepted

FTPS with IP restriction OR SFT over SSH without IP restriction - which one is more secure?

This question has beed discussed in stackexchange and online already (e.g. see this article) but I'll try to address your specific points. As a clarification: FTPS = FTP Secure, which is FTP over TLS ...
  • 1,267

Top 50 recent answers are included