empty passphrases ...

From: Micha³ Kurowski (mkur_at_poczta.gazeta.pl)
Date: 03/03/04 

Date: Wed, 3 Mar 2004 19:44:29 +0000 (UTC)

Hi,

The problem is widely known, certainly - I would want to hear your
opinion.

How to you disable empty passphrases on private keys ?

I have some users with WinSCP clients on publically available
accounts. They have a habit of enabling "stored sessions" in it and it
seems to me it posses a real security risk ...

On the other hand I would like to have key-based logins enabled - it
is needed for many administrative tasks.

What are the options ? 

-- 
Michal Kurowski
<mkur@poczta.gazeta.pl>
Quantcast