News for hackers. Stuff that matters.

A comment on Secretive – macOS native app to store SSH keys in the Secure Enclave. Parent comment

Re:Secretive – macOS native app to store SSH keys in the Sec... by fragmede on Saturday June 27, 2020 @10:07PM (#23666281)
> which makes them less secure than the passwords for websites managed by the exact same keychain

That's NOT true. While giving out less information to untrusted parties is obviously better than more, the private key itself is not transmitted directly to the server. This means that connecting to an attacker's SSH server doesn't give them a copy of your private key, so they can't then connect to your SSH servers.

[ Parent | on HN ]
Re:Secretive – macOS native app to store SSH keys in the Sec... by kortilla on Sunday June 28, 2020 @02:30AM (#23667091)
The scenario here is with -A (agent forwarding). This means as long as you’re connected to a server with that enabled, that server can auth as you to a bunch of other stuff by having your client do it silently.
[ Parent | on HN ]