Duplicate SSH Keys Everywhere

Re:Duplicate SSH Keys Everywhere by maaaats on Tuesday February 17, 2015 @05:54PM (#9065715)

What about "personal" private keys? I find it a hassle to add new keys for every device to each host I ssh into, so I usually just end up copying them from device to device..

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by iso8859-1 on Tuesday February 17, 2015 @07:50PM (#9066327)

All these questions have insightful answers. I'd say "use separate set of private keys for each originating device".

http://superuser.com/q/189355/33303

http://serverfault.com/q/170682/80866

http://security.stackexchange.com/q/40050/13510

http://security.stackexchange.com/q/10963/13510

http://unix.stackexchange.com/q/27661/14305

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by ckuehl on Tuesday February 17, 2015 @05:58PM (#9065742)

Are you talking about SSH host keys? Those are normally generated automatically, and should be unique for each server.

(These are the things you're asked to verify the first time you connect to a new server.)

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by maaaats on Tuesday February 17, 2015 @06:02PM (#9065763)

Sorry, meant my key, the one I use to connect with and have added the public part of to numerous servers.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by ckuehl on Tuesday February 17, 2015 @06:05PM (#9065786)

There's nothing wrong with adding your public key to many servers, as long as you keep the private key secure -- almost everyone does this. The article is discussing sharing of SSH host keys, which allows impersonation of an SSH server.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by jamiesonbecker on Tuesday February 17, 2015 @11:27PM (#9066991)

That's what Userify is for... don't copy your keys around by hand! :)

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by dlitz on Tuesday February 17, 2015 @06:15PM (#9065852)

SSH agent forwarding should eliminate the need to do that.

[ Parent | on HN ]