2 ms·
Key takeaways from my quick skim of this: 1. It was only uploading RSA private keys, which are pretty antiquated these days. Generate yourself an ed25519 key,
by jon-wood 3y ago
Key takeaways from my quick skim of this:
1. It was only uploading RSA private keys, which are pretty antiquated these days. Generate yourself an ed25519 key, which is both more secure, and not a million characters long when passing round the public key.
2. It wasn’t pulling keys from your SSH agent. This seems like yet another reason to use one. 1Password (unaffiliated, I just really like it) includes an agent that will load keys from your password store and ask for authentication the first time a process requests to use it.
3. I am once again struck by just how fragile the software supply chain is.