4 ms·
What about "personal" private keys? I find it a hassle to add new keys for every device to each host I ssh into, so I usually just end up copying them from devi
by maaaats 12y ago
What about "personal" private keys? I find it a hassle to add new keys for every device to each host I ssh into, so I usually just end up copying them from device to device..
- ckuehl 12y agoAre you talking about SSH host keys? Those are normally generated automatically, and should be unique for each server. (These are the things you're asked to verify the first time you connect to a new server.)
- maaaats 12y agoSorry, meant my key, the one I use to connect with and have added the public part of to numerous servers.
- ckuehl 12y agoThere's nothing wrong with adding your public key to many servers, as long as you keep the private key secure -- almost everyone does this. The article is discussing sharing of SSH host keys, which allows impersonation of an SSH server.
- dlitz 12y agoSSH agent forwarding should eliminate the need to do that.
- iso8859-1 12y agoAll these questions have insightful answers. I'd say "use separate set of private keys for each originating device". http://superuser.com/q/189355/33303 http://superuser.com/q/189355/33303 http://serverfault.com/q/170682/80866 http://serverfault.com/q/170682/80866 http://security.stackexchange.com/q/40050/13510 http://security.stackexchange.com/q/40050/13510 http://security.stackexchange.com/q/10963/13510 http://security.stackexchange.com/q/10963/13510 http://unix.stackexchange.com/q/27661/14305 http://unix.stackexchange.com/q/27661/14305
- jamiesonbecker 12y agoThat's what Userify is for... don't copy your keys around by hand! :)