4 ms·
I really like the idea of using SSH keys: one less password to manage, and it avoids sharing a secret with your provider. With hash-based signature schemes, yo
by justinsb 15y ago
I really like the idea of using SSH keys: one less password to manage, and it avoids sharing a secret with your provider.
With hash-based signature schemes, you know that your secret has to be stored in cleartext, which is why you can't choose your own signing token on any clouds.
As a solution for technical users, SSH-keys seem like a great idea: they're battle-tested, avoid a shared secret, are no less convenient than using long system-generated tokens, and have a much richer ecosystem (e.g. ssh-agent, password protection, the possibility to store it on hardware devices etc)