3 ms·
The fact that you make several valid points doesn't mean keys shouldn't default to having passphrases. Yes, there are attack vectors which having a passphrase
by akerl_ 11y ago
The fact that you make several valid points doesn't mean keys shouldn't default to having passphrases.
Yes, there are attack vectors which having a passphrase doesn't protect against.
Yes, passphrases require additional considerations when starting services.
No, this doesn't mean they're "mostly a hassle".
No, you probably shouldn't default to passphraseless keys.
- ryan-c 11y agoIn at least 99.9% of cases, the an RSA private key used by a service will be stored unencrypted. Would having a default that's the opposite of what nearly all users want be sensible?