logoalt Hacker News

ulrikrasmussentoday at 6:37 AM1 replyview on HN

I had never thought about that. Seems like an easy problem to fix by sending salted hashes instead.


Replies

unsnap_bicepstoday at 7:22 AM

The server matches your purposed public key with one in the authorized keys file. If you don't want to expose your raw public key to the server, you'll need to generate and send the hashed key format into the authorized keys file, which at that point is the same as just generating a new purpose built key, no? Am I missing something?