Re:Sign arbitrary data with your SSH keys
by whirlwin on Saturday November 13, 2021 @05:32AM
(#29208856)
This can be a security risk if you're using the same SSH keypair for other things, and you're using a less secure algorithm than RSA or ED or similar. Anyone doing a bit of research about you might discover a vulnerable host for which the vulnerable algorithm keypair might be targeted
[ Parent
| on HN ]
Re:Sign arbitrary data with your SSH keys
by teekert on Saturday November 13, 2021 @06:28AM
(#29209077)
When that happens you were relying on security by obscurity. It’s a hack waiting to happen. This, at least creates awareness and forces secure keys. But you are right, it may be a security risk, but only when it already was (arguably it was smaller).