Re: Suggestion for a new feature, port code

Johan Söderberg <[email protected]> Wed, 2 Mar 2011 19:08:52 +0000 (UTC)
Newsgroups gmane.os.openbsd.pf
Message-ID <[email protected]>
2011/2/28, Karl O. Pinc:
> If you want it to be secure you make the knock code a ome-time-pad.

2011/3/1, me:
> If I change the knock ports every time I log in, I should be fine, right?

Nah, still vulnerable to MITM.
Just intercept and stop the knocks from reaching, and replay them yourself.
But it needs to be planned. So it's still worth changing knocks.