2 ms·
> I have zero hesitancy to blow away a git ssh key for any reason and use different keys from different hosts which are not used for anything else. I'm a littl
by nomel 4y ago
> I have zero hesitancy to blow away a git ssh key for any reason and use different keys from different hosts which are not used for anything else.
I'm a little confused. I thought this was how you're supposed to do it, so you can easily revoke access for a particular host.
- denkmoon 4y agoGenerally yes, but here you're using this ostensibly ephemeral key as an identity. Usually you want your identity to _not_ be ephemeral, so that it can reliably identify you. Which is why this is a bit silly and I don't see why you'd do this rather than "good old" PGP.
- justsomeadvice0 4y agoLots of people use permanent-ish HSM-backed keys (like yubikeys) for SSH access so I guess this saves them from distributing another key? Outside of that I agree, I don't really see the point.
- stormbrew 4y agoMostly because using pgp (or more specifically gpg) is a pain in the ass and ssh-keygen is not
- wodenokoto 4y agoI can setup a pair of SSH keys. I have given up trying to setup PGP. So that's one reason to not use ""good old" PGP". Why can a PGP key be permanent but an SSH key not? I'm assuming both are just files and as a user you are required not to lose/give them away.