News for hackers. Stuff that matters.

A comment on The default OpenSSH key encryption is worse than plaintext. Parent comment

Re:The default OpenSSH key encryption is worse than plaintext by lvh on Friday August 03, 2018 @08:56PM (#17684787)
Don't do this. Get an SSH CA and temporary credentials, and make your authentication to that SSH CA actually good (e.g. SAML with mandatory U2F).
[ Parent | on HN ]
Re:The default OpenSSH key encryption is worse than plaintext by Boulth on Saturday August 04, 2018 @02:50AM (#17685717)
What's the difference between SAML+U2F vs smartcard stored SSH key? Both cannot be easily stolen or abused. Additionally Yubikey have touch-to-use policy that further protects the key usage.
[ Parent | on HN ]