Hacker News new | past | comments | ask | show | jobs | submit login

I would assume that if your internal network is "trusted", then the risk of a MitM is low enough that you wouldn't have to check the signature. I agree that an extra layer of validation is always a nice thing to have, but everyone has different levels of acceptable inconvenience with regards to security.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: