tilde.town: A social network over SSH

Re:tilde.town: A social network over SSH by phre4k on Friday August 28, 2020 @09:00AM (#24304318)

Then they should create one key per service and only use that one.

[ Parent | on HN ]

Re:tilde.town: A social network over SSH by alexeldeib on Friday August 28, 2020 @11:17AM (#24305864)

Which they've done from the sound of it, and are concerned about the ability to read those other public keys and use them as a tracking vector.

[ Parent | on HN ]

Re:tilde.town: A social network over SSH by boring_twenties on Friday August 28, 2020 @02:19PM (#24308268)

As another commenter already pointed out, the IdentitiesOnly config option removes that ability. The ssh-config man page explains this.

[ Parent | on HN ]

Re:tilde.town: A social network over SSH by myself248 on Friday August 28, 2020 @02:43PM (#24308518)

Out of curiosity, are there reasons that that behavior shouldn't be the default?

[ Parent | on HN ]

Re:tilde.town: A social network over SSH by soraminazuki on Friday August 28, 2020 @09:53PM (#24312600)

I can think of three reasons:

1. It would stop SSH agent forwarding from working if the remote has it enabled.

2. It would stop alternative SSH agent implementations from working.

3. It would only make sense if you actually have multiple identities.

[ Parent | on HN ]

Re:tilde.town: A social network over SSH by boring_twenties on Friday August 28, 2020 @03:04PM (#24308751)

I'm not sure it makes much sense unless you also override the default IdentifyFile.

[ Parent | on HN ]

Re:tilde.town: A social network over SSH by boring_twenties on Friday August 28, 2020 @11:36PM (#24313212)

Argh, IdentityFile.

I make the same damn mistake in my actual config file, too.

[ Parent | on HN ]