SSLegance

[grarpamp]

> This does nothing for the case of "server gives their keys to the feds"

Can SSH operate in ephemeral mode?

> is active MITM a big enough threat that we need to be worrying
> about it other than in airports and hotels?

Recent news apparently confirms that 'cooperating' with large
adversaries centrally is apparently easier and less costly than
those same entities screwing around in the wiring closets of
such random local places against specific targets.