Re: Cygwin SSH and authorised keys

From: Richard E. Silverman (res_at_qoxp.net)
Date: 01/21/05 

Date: 21 Jan 2005 00:38:13 -0500

> This will generate SSH keys for you. You needn't worry about RSA
> keys. Contemporary SSH uses DSA keys.

This is misleading. The SSH protocol requires the ssh-dss key type, so
it's a good idea to have one for maximum compatibility. However, it also
recommends RSA, most SSH implementations today do both, and historically
there have even been implementations that did only RSA (e.g. PuTTY).

> You will want to password protect your keys, but you needn't.

It might be best to indicate just how good an alternative this is. As
long he'd also be comfortable putting his login password in a file in his
home directory named MY-PASSWORD.TXT, then sure this is a fine idea. 

-- 
  Richard Silverman
  res@qoxp.net

Relevant Pages

  • Re: Opening ports in my firewall
    ... >> only with DSA keys, and not allowing manual password logins. ... - copy the .ssh directory to the new machine, if you control it, or ... Walter Dnes; my email address is *ALMOST* like wzaltdnes@waltdnes.org ...
    (comp.os.linux.security)
  • RE: sshd / ssh setup
    ... USA server and his windows/xp notebook to use SSH. ... followed sshd instruction and built ... and require users to submit keys. ...
    (freebsd-questions)
  • Re: SSH via Expect disconnects
    ... using autoexpect was the answer (please refer to thread ... >> I have received one suggestion that I explore the idea of using keys ... >> have poured through the manpage for Expect as well as SSH, ... >>> I am using an expect script to initiate an SSH session to another host ...
    (comp.lang.tcl)
  • Re: Firewall security: Re: Problems with simple Samba file share
    ... Man ssh ... ... Why is that, Peter? ... The firewall does help protect ... against someone stealing the keys and using them at another location. ...
    (comp.os.linux.misc)
  • Re: Ported tools and SSH
    ... auditors are grumbling about SSH because it stores its keys in the open. ... simple and steps can often be taken to meet security requirements. ... Consider first z/OS SSH as a server: ...
    (bit.listserv.ibm-main)
Quantcast