News for hackers. Stuff that matters.

A comment on The default OpenSSH key encryption is worse than plaintext. Parent comment

Re:The default OpenSSH key encryption is worse than plaintext by chx on Saturday August 04, 2018 @05:06AM (#17686032)
> consider that long-lived SSH credentials are an anti-pattern

With due respect: have you considered the myriad systems where you need to upload your SSH key to an UI? If my key is short term then I need to do that all the time. I can't set up an SSH CA on github for example.

[ Parent | on HN ]
Re:The default OpenSSH key encryption is worse than plaintext by lvh on Saturday August 04, 2018 @09:01AM (#17686708)
Yes, we mentioned GitHub repeaatedly in these threads.
[ Parent | on HN ]
Re:The default OpenSSH key encryption is worse than plaintext by laumars on Saturday August 04, 2018 @05:37AM (#17686128)
GitHub has APIs for automation (eg via Terraform). Granted not ever web-based service does, but if you were sufficiently determined to use SSH CA then I'm sure you'd find a way (or an alternative service that did support your workflow).
[ Parent | on HN ]
Re:The default OpenSSH key encryption is worse than plaintext by alxlaz on Saturday August 04, 2018 @05:10AM (#17686049)
The fact that GitHub does it, too, doesn't make it any less of an anti-pattern.
[ Parent | on HN ]