logoalt Hacker News

marshrayyesterday at 7:51 PM2 repliesview on HN

So I'm supposed to set up PKI before I can open a remote console connection?

Please just make it work seamlessly with my existing SSH credentials. Like SFTP.


Replies

kaoDtoday at 7:15 AM

You don't need PKI.

Nothing prevents RustDesk from implementing TLS TOFU (see e.g. Gemini Protocol), which offers the same security guarantees as SSH TOFU.

preisschildyesterday at 8:55 PM

You could just make use of public oidc/oauth2 providers like Google/Github/Microsoft/Cloudflare Generic OIDC or heck, even your bluesky account via ATProto oauth

But yeah, you could also make use of your ed25519 ssh public key as client certificate and accept based on fingerprint like ssh