Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Use TouchID to Authenticate Sudo on macOS. Parent comment
With some security mechanism, I'd consider:
1. prevent other people from being able to use it. 2. recover from it in case it gets lost.
If your perspective is "if I lose this laptop, I have some other way to access the systems", then it's good to never access the SSH key secret.
If your perspective is that you want your secret key to be the only way to access some system, you'll want to have some way to recover the secret.
I think in any case, it's understood that having an unrecoverable secret being the only way to access some system is a bad idea.
There are no comments on this comment yet.
With some security mechanism, I'd consider:
1. prevent other people from being able to use it. 2. recover from it in case it gets lost.
If your perspective is "if I lose this laptop, I have some other way to access the systems", then it's good to never access the SSH key secret.
If your perspective is that you want your secret key to be the only way to access some system, you'll want to have some way to recover the secret.
I think in any case, it's understood that having an unrecoverable secret being the only way to access some system is a bad idea.