[rudra]

I don't think port knocking in itself is a great security enhancement. People can find out your sequence easily if they can intercept your traffic. So you need an independent second channel or some other way to vary the sequence. I would rather use ssh with security certificates than this blasted thing.

Also your security depends on a lot of trust, explicit and implicit, between a lot of parties. Cause in modern computers so many things work together that it is impossible for one man or a single group to keep tab on everything. from the firmware routine/small control/watchdog os always there running on its own processor inside your processor to your bios/boot up routine to OS core codes and drivers to various programming environments and coexisting softwares, it is a lot of code working together at various steps. I so hope this vision will help people understand how fragile this security really is. But it never does.

And they end up thinking that using port knocking is gonna improve it a lot.