News for hackers. Stuff that matters.

A comment on An SSH server that knows who you are. Parent comment

Re:An SSH server that knows who you are by kanox on Monday February 17, 2020 @12:00AM (#22345710)
Why is this obvious? I don't know much about crypto but I'd imagine it's possible for an protocol to not reveal the identity of the authenticating party.

For example a server can send a challenge which requires knowledge of the private key to solve but does not reveal anything from the client on failure.

If the server has multiple authorized_keys it could just send multiple challenges and accept a reply for any of them.

Am I missing something? This seems like a nice privacy feature.

[ Parent | on HN ]
Re:An SSH server that knows who you are by vore on Monday February 17, 2020 @12:39AM (#22345828)
If you don't know the identity of the authenticating party, how does the authenticating party log in to their account?
[ Parent | on HN ]
Re:An SSH server that knows who you are by saagarjha on Monday February 17, 2020 @12:46AM (#22345851)
They tell you which account they want to log in as, which isn't necessarily their global identity they'd like to share with you.
[ Parent | on HN ]
Re:An SSH server that knows who you are by kanox on Monday February 17, 2020 @01:46AM (#22346022)
Exactly: you wouldn't be able to ssh [email protected]/repo/proj but rather have to use [email protected]/proj/repo and this would be better.
[ Parent | on HN ]