Re: SSH vs encrypted passwords

From: Tim Haynes (usenet-20041112_at_stirfried.vegetable.org.uk)
Date: 11/12/04 

Date: Fri, 12 Nov 2004 14:03:28 +0000

Michael Heiming <michael+USENET@www.heiming.de> writes:

[snip]
> Not really, use a good pass-phrase while generating your user
> keys, you shouldn't enter <return> twice if asked for the
> pass-phrase, or this would be possible. With a pass-phrase it
> doesn't matter if anyone steals the key, it's worthless.

You can also lock a key down to a specific IP#, which may help.

~Tim 

-- 
Back on the stamping ground                 |piglet@stirfried.vegetable.org.uk
Where it all began                          |http://spodzone.org.uk/pigmail/