Duplicate SSH Keys Everywhere

Re:Duplicate SSH Keys Everywhere by ckuehl on Tuesday February 17, 2015 @05:58PM (#9065742)

Are you talking about SSH host keys? Those are normally generated automatically, and should be unique for each server.

(These are the things you're asked to verify the first time you connect to a new server.)

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by maaaats on Tuesday February 17, 2015 @06:02PM (#9065763)

Sorry, meant my key, the one I use to connect with and have added the public part of to numerous servers.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by ckuehl on Tuesday February 17, 2015 @06:05PM (#9065786)

There's nothing wrong with adding your public key to many servers, as long as you keep the private key secure -- almost everyone does this. The article is discussing sharing of SSH host keys, which allows impersonation of an SSH server.

[ Parent | on HN ]