Re: Question about ssh key generation

2021-02-16 Thread Curt Howland
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tuesday 16 February 2021, Shawn O'Shea was heard to say: > This is just my impression from seeing various blog posts, tweets > and podcast discussions, so others may have better > answers/guidance. Thank you. This is not a silly question, such

Re: Question about ssh key generation

2021-02-16 Thread Shawn O'Shea
My understanding (your mileage may vary). * dsa used to be a goto, but is now considered bad/insecure * rsa is still the default in many ssh configs, but is starting to also be considered not secure * ed25519 is considered pretty secure, but the impression I've been given is that it is new-ish

Question about ssh key generation

2021-02-16 Thread Bruce Labitt
Gitlab is asking for ssh keys now.  Is there a recommended type of key these days? man ssh-key gives me the following choices:  dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa Which should I choose?  Which ones offer the longer/longest key length (best security?) Sorry for the simplistic