Hacker News Reader

Agreed this ask makes no sense to me.

It sounds like they want the system to somehow know which IP is supposed to be associated with a particular key.

You already can restrict public IPs using iptables…

That actually sounds kind of useful. The firewall doesn’t know about keys. It might be handy to say “this key can only ever connect from this IP”, like when setting up links between fixed business systems. If you know a key can never be legitimately used from any other IP in the world, why not add defense in depth?

I wouldn’t lose sleep over not having that. It’d be a nice bonus though.

Reply on news.ycombinator.com