3 ms·
The new format has been around for a pretty long while (2013). I think it makes sense to upgrade to -o. While it's obvious to developers (I hope!) it's not obvi
by lvh 8y ago
The new format has been around for a pretty long while (2013). I think it makes sense to upgrade to -o. While it's obvious to developers (I hope!) it's not obvious to most end users I think :)
- claytonjy 8y agonot only does it seem like this is a better default, this option is awfully well-hidden on my system; doesn't show up in the short help or the example usage in the man page; gotta scroll down to find it in the exhaustive list of flags
- Avamander 8y agoThe utility also does not warn about insecure defaults.
- jniedrauer 8y agoIt's worth noting that some large cloud providers (for example, AWS) still do not support ed25519 keys.
- exegete 8y agoI believe you can change to the new format (still not ed25519 though). After generating your keypair in the AWS console, do "ssh-keygen -p -o -f aws.pem" and add a strong passphrase generated from a password manager.