Re:Essential security for Linux servers (2013)
by 3np on Wednesday December 08, 2021 @04:41AM
(#29482776)
Nitpick: passphrase, not password
[ Parent
| on HN ]
Re:Essential security for Linux servers (2013)
by atoav on Wednesday December 08, 2021 @06:05AM
(#29483375)
Nitpick: if you have a password manager it doesn't matter
Re:Essential security for Linux servers (2013)
by 3np on Wednesday December 08, 2021 @01:16PM
(#29488293)
Well it kind of does.. A password is validated, and if you lose it there is usually some recourse. Reset or whatnot. It may be a hassle but always possible somehow.
If you lose a passphrase, no one can help you even if you hit HN front page and /r/all with a sob story. So backups and availability have a different cruciality.
Also if you store a private key on the same medium as a password store with weak encryption or key that contains the passphrase, they key can't be considered as strong anymore.
There are practical reasons to make a distinction and mistakes can be expensive.