logoalt Hacker News

bauruinetoday at 6:13 AM3 repliesview on HN

ssh by default sends all your public keys to a server. Yes you can limit some keys to specific hosts but it's very easy to dox yourself.


Replies

grey-areatoday at 7:03 AM

Doesn’t it try one key at a time rather than send all?

ulrikrasmussentoday at 6:37 AM

I had never thought about that. Seems like an easy problem to fix by sending salted hashes instead.

show 1 reply
esttoday at 7:25 AM

so it's good practice to store key in non-default location and use ~/.ssh/config to point the path for each host?

show 3 replies