3 ms·
This is excellent. A different way of enhancing the security of a private key is to use a passphrase and store the passphrase in the macOS Keychain. Then, conf
by nelox 4y ago
This is excellent.
A different way of enhancing the security of a private key is to use a passphrase and store the passphrase in the macOS Keychain. Then, configure ssh-agent to always use the Keychain. When you login to your Mac user account, it will unlock it for use with ssh.
The encryption key needed to decrypt the Keychain is stored inside the Secure Enclave.
If someone manages obtain your private key, they would also need guess your passphrase or gain access to the Secure Enclave.