Trust On First Use/Persistence Of Pseudonym

TOFU/POP is a trust model for verifying the identity of the other side of a secure connection. It is used in SSH and other protocols. The idea is that you blindly trust the identity of the other side the first time that you see it. That trust is then stored to be checked in the future. So in a sense a pseudonym for the other side has been created and persisted since there is no other verification that the other side is who they say they are.

Also available in: PDF HTML TXT