3 ms·
> There are no trusted hosts. ...your own (headless) server that's in the same room as you, when you're using your laptop as a thin-client for it?
by derefr 3y ago
> There are no trusted hosts.
...your own (headless) server that's in the same room as you, when you're using your laptop as a thin-client for it?
- xandrius 3y agoWith all these recent exploits, I wouldn't even be 100% sure of that.
- wolletd 3y agoBut if I can't trust even that host, I also can't trust the host I'm working on and which doesn't need agent forwarding to access my SSH agent.
- hot_gril 3y agoTrusting one host is safer than trusting two hosts.
- jethro_tell 3y agoThis is where certs are nice, sign one every morning with a 8/12 hour TTL
- quibuss 3y agoInteresting idea. Does need some automation though to make it practical irl.
- dotancohen 3y agoDepending on what it's serving, and how up to date it is, and who else is on that network and can access the server, and who else can come into that same room when you're not there, and from where you get the software that you install on that server... it might be less trustworthy than you think.
- jstanley 3y agoBut if that's your standard then the laptop you're connecting from is not trusted either, and then you're not even allowed to use your own keys. You're allowed to draw sensible boundaries.