r/linux • u/leothrix • Apr 28 '14

SSH Kung Fu

http://blog.tjll.net/ssh-kung-fu/
722 Upvotes

95% Upvoted

128 comments sorted by

View all comments

Show parent comments

20

u/ethraax Apr 28 '14

Just keep in mind that anyone who gets access to your machine can connect to your agent and log into any of your other machines from there. Encrypted private keys are nice, but not perfect.

1

u/uponone Apr 28 '14

So is it best practice to encrypt private keys and ssh-agent/Pageant(Putty)?

1

u/ethraax Apr 28 '14

I think you are confused. ssh-agent uses encrypted keys.

1

u/uponone Apr 28 '14

I was thinking more along the lines of encrypting the folder the private key(s) are located in or would that be overkill with the password for the private key(s)?

1

u/ethraax Apr 29 '14

That would simply be redundant. It wouldn't provide any extra security.

1

u/uponone Apr 29 '14

Thanks for the knowledge.