On Mon, 28 Aug 2023 at 21:50, Simo Sorce <simo(a)redhat.com> wrote:
It could be improved by using TOFU, so that the window of
impersonation
is small, but requires clients to cache an association and then has
weird failure modes to be dealt with if one of the actors get re-imaged
or changes the cert for any reason.
I was thinking of implementing TOFU; good idea or bad idea?
Richard.