4 ms·
Ok, SSH agent is fantastic, but why it is not used to log to websites? Is it so complicated to paste my public key to some textarea during account creation at a
by jiri 15y ago
Ok, SSH agent is fantastic, but why it is not used to log to websites? Is it so complicated to paste my public key to some textarea during account creation at any website? What is the reason that no site is using this?
- eli 15y agoYes. That is definitely too complicated for the vast majority of websites.
- weavejester 15y agoThere's no browser support, and it's too much of a hassle to do manually. I guess you could create a small app that authenticates via an API, which could then copy-paste a signed authentication token to the clipboard, or inserts it into the login page via a plugin.
- jiri 15y agoI did some googling and the part of copy/paste of public key to website is pretty obvious and could be useful maybe for some tech sites. At least many people can do copy/past of key very well, as you can see by trying to find all public/private keys at pastebin.com ... But what is very difficult is to enable website to authorize using your agent or your private key. But ... the SSL certificates in browser should be the way to go, but as author in blog post wrote "they are just so full of glitches and surprises as to be virtually unusable" :-(