4 ms·
How's that so? The attacker has no knowledge of the user name of the key, unless that is also leaked, then only white listed IP may help.
by mekster 4y ago
How's that so? The attacker has no knowledge of the user name of the key, unless that is also leaked, then only white listed IP may help.
- nullc 4y agohope you don't use github (which discloses all users keys, attached to their usernames there), and/or the same username in multiple places. SSH also leaks the keys it'll accept, it doesn't use a zero knowledge proof to first determine if the client and the server have mutually acceptable keys.