News for hackers. Stuff that matters.

A comment on Ask HN: My client want an agent on my laptop. Is this the new normal?. Parent comment

Re:Ask HN: My client want an agent on my laptop. Is this the... by GoblinSlayer on Friday December 17, 2021 @05:17AM (#29590208)
Just compartmentalize your passwords and private keys. That said, private keys are generated on the dedicated hardware and always stay there - that's all you need to manage them.
[ Parent | on HN ]
Re:Ask HN: My client want an agent on my laptop. Is this the... by blitzar on Friday December 17, 2021 @06:00AM (#29590571)
+ 2fa + sensible rotation of keys and passwords (especially if you use say github for personal / work / multiple clients) - they can have the password at that point and it is of limited use.
[ Parent | on HN ]
Re:Ask HN: My client want an agent on my laptop. Is this the... by withinboredom on Friday December 17, 2021 @07:21AM (#29591217)
I store all my keys in a yubikey (including ssh keys). The client can’t have the keys if I don’t have the keys.
[ Parent | on HN ]