2 ms·
A lot of things can read ssh key files, including, sometimes, internet ads: http://www.zdnet.com/article/mozilla-urges-users-to-update-firefox-with-file-stealin
by okasaki 11y ago
A lot of things can read ssh key files, including, sometimes, internet ads: http://www.zdnet.com/article/mozilla-urges-users-to-update-firefox-with-file-stealing-exploit-in-wild/ http://www.zdnet.com/article/mozilla-urges-users-to-update-f...
Passwords can't really be gotten that easily.
- andrewflnr 11y agoWhich is, among other reasons, why you encrypt your key with a passphrase.
- psykovsky 11y agoWhy not just use the passphrase in the first place? Or do you think an offline attack on a key passphrase is going to be more difficult than an online attack to a server with rate limiting configured?