4 ms·

Then they should create one key per service and only use that one.

• alexeldeib 6y ago
  Which they've done from the sound of it, and are concerned about the ability to read those other public keys and use them as a tracking vector.
  • boring_twenties 6y ago
    As another commenter already pointed out, the IdentitiesOnly config option removes that ability. The ssh-config man page explains this.
    • myself248 6y ago
      Out of curiosity, are there reasons that that behavior shouldn't be the default?
      • boring_twenties 6y ago
        I'm not sure it makes much sense unless you also override the default IdentifyFile.
        • boring_twenties 6y ago
          Argh, IdentityFile. I make the same damn mistake in my actual config file, too.
      • soraminazuki 6y ago
        I can think of three reasons: 1. It would stop SSH agent forwarding from working if the remote has it enabled. 2. It would stop alternative SSH agent implementations from working. 3. It would only make sense if you actually have multiple identities.