logoalt Hacker News

esttoday at 7:25 AM3 repliesview on HN

so it's good practice to store key in non-default location and use ~/.ssh/config to point the path for each host?


Replies

9devtoday at 7:37 AM

What a great case of "you're holding it wrong!" I need to add individual configuration to every host I ever want to connect to before connecting to avoid exposing all public keys on my device? What if I mistype and contact a server not my own by accident?

This is just an awfully designed feature, is all.

show 1 reply
wasmitnetzentoday at 8:45 AM

I would say it's best practice to use a key agent backed by a password manager.

geocartoday at 7:35 AM

Specifically to use a different key for each host.