4 ms·
How does outsourcing your key list give ms access to my box? Presumably you mean because they also have the private key?
by zufallsheld 5y ago
How does outsourcing your key list give ms access to my box?
Presumably you mean because they also have the private key?
- yjftsjthsd-h 5y agoBecause they can serve any list of public keys they want; they can return a blank list and lock you out, or append another key at will.
- sneak 5y agoNo, the keys on GitHub are only the public portion. If your sshd consults Microsoft servers to check a key, Microsoft can serve it any file they wish (or are forced to), such as a list of Equation Group pubkeys.