4 ms·
In Denmark they actually issue their citizens little RSA tokens for use authenticating into government websites. Of course, there are issues sometimes with des
by thrwawy283 5y ago
In Denmark they actually issue their citizens little RSA tokens for use authenticating into government websites. Of course, there are issues sometimes with desynced tokens but I wish our government took things that seriously.
- genewitch 5y agoAs an aside, if you're using ssh-rsa the latest openssh server removed the RSA encryption module for pubkey verification, by default. You can add it back into the sshd_config in /etc.
- mortehu 5y agoIt should be added that this is because ssh-rsa uses SHA1, which is broken, and not because there's a problem with RSA itself.
- doublepg23 5y agoMy main key was a ed25519 one for a while (looks like 2016-2018) but after running into so many edge cases I just went back to a rsa 4096. Is it in a better place now?
- thwarted 5y agossh's support for RSA has nothing to do with RSA tokens, which is the common name for RSA's SecurID hardware 2FA generators.
- walterbell 5y ago> I wish our government took things that seriously See the recent Zero Trust memo, https://news.ycombinator.com/item?id=30101411 https://news.ycombinator.com/item?id=30101411
- thrwawy283 5y agoThat makes me incredibly optimistic. Thanks for sharing that. :-)