3 ms·

OAuth for SSH? What the hell are you guys doing? No, stop. Stop. Drop it. Go back to the drawing board and learn what SSH can do apart from password and public

by creshal 11y ago

OAuth for SSH? What the hell are you guys doing? No, stop. Stop. Drop it. Go back to the drawing board and learn what SSH can do apart from password and public key auth (hint: Everything from challenge-response schemes to Kerberos).

dragonwriter 11y ago
Are they using Git SSH at all? I assumed they were using OAuth with Git HTTPS transport...
- creshal 11y ago
  Yes, but why?
  - yaur 11y ago
    Because VSTS doesn't support SSH
    - creshal 11y ago
      Embrace, extend, extinguish, phase 2?
drdaeman 11y ago
It's not what they're doing (they don't have SSH at all), but is there anything wrong in using OAuth2 tokens to authenticate with SSH server? Conceptually, they're just another form of password (pre-shared secret).