3 ms·
the motivations are great: "Moving a file to a friend's machine, when the humans can speak to each other (directly) but the computers cannot Delivering a prop
by the_cat_kittles 9y ago
the motivations are great:
"Moving a file to a friend's machine, when the humans can speak to each other (directly) but the computers cannot
Delivering a properly-random password to a new user via the phone
Supplying an SSH public key for future login use"
i had never even thought about those, and this is a great solution afaik
- pmontra 9y ago> Supplying an SSH public key for future login use It's public so it can be emailed in cleartext to the admin of the server, copied in any instant messenger or painted on walls. It's the secret key that ensures all the security of the connection.
- vbernat 9y agoIt still needs to be authenticated. It could be replaced by an attacker public key.
- pferde 9y agoThis is a scenario where "the humans can speak to each other (directly) but the computers cannot". Key authenticity is not a problem, the other party can verify that the fingerprint is correct.
- Piskvorrr 9y agoTrue, but have you actually tried to verify even a short SSH pubkey over a human communication channel? It can be done, but the horrible, horrible UX!