On Wed, 11 Oct 2006 at 19:53, Dice R. Random wrote:
The danger with key-only auth, IMO, is that if your workstation is
compromised, even just the user account, an attacker can copy your
private key and gain root access to the server.  Of course your user

Only if they also break the encryption on your private key.  A good
passphrase should make that take long enough to be impractical.  Or if
you are worried, gen a new key every X months...

--David
--
[email protected] mailing list

Reply via email to