News for hackers. Stuff that matters.

A comment on Sign arbitrary data with your SSH keys. Parent comment

Re:Sign arbitrary data with your SSH keys by newaccount74 on Saturday November 13, 2021 @08:25AM (#29209533)
Doesn't OpenSSH by default also send all your public keys to the server to see if it accepts any of them? That would allow the server operator to identify you if you aren't careful.
[ Parent | on HN ]
Re:Sign arbitrary data with your SSH keys by Gargyle on Saturday November 13, 2021 @09:42AM (#29210044)
Can be configured in .ssh/config. Shortcut for that is to use subdirs or filenames for keys that arent searched automatically and not have a default-name-key.
[ Parent | on HN ]