[Ach] Fwd: SSH Pubkey authentication?

[Aaron Zauner]

---------- Forwarded message ----------
From: Aaron Zauner <azet at azet.org>
Date: Mon, Jan 6, 2014 at 3:27 PM
Subject: Re: [Ach] SSH Pubkey authentication?
To: Lorenz Intichar <lorenz at intichar.at>


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Lorenz,

Lorenz Intichar wrote:
> Dear List,
>
> would you think it worth while to recommend (and/or explain) SSH
> pubkey authentication in ACH, or would that be considered Off-Topic
> in a crypto manual?
>
> I´d like to propose SSH PubKey procedures (i.e Key Generation, open
> SSH "PasswordAuthentication no" and PubKey Auth in IOS / ASA) as a
> general security enhancement, but would like to get some opinions
> about this topic (or off-topic ;-) ) first.
That's probably not a bad idea as long as it doesn't get too verbose.
The guide is aimed at sysadmins and most probably already know what
public key authentication is. A short guide would be helpful though.

Feel free to write something and open a pull request on github or the
mailing list.

Thanks,
Aaron
-----BEGIN PGP SIGNATURE-----
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=4bks
-----END PGP SIGNATURE-----
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/ach/attachments/20140106/18d9d847/attachment.html>