My web hosting provider requires my ssh password and one of or both private and or public ssh keys to setup ssh access. This seems like a security risk to me. Aren't private keys supposed to stay on your machine. If I gave out my ssh password couldn't they just create my private and public keys themselves? Wouldn't that allow them access to my machine? Or am I mistaken?
For clarity: it's on the hosting providers website that they are asking for the ssh key and one or both public and or private ssh keys in a web form not an error openssh terminal connection or human interaction. They have two text areas that you can choose one or both and they are for your public and private keys. Then they have one mandatory text area for ssh key.
Im used to gaining access to sites that allow ssh by only giving out my public key so this seems fishy.
Also hoping this falls under risk management as Im trying to understand if this is a risk to my machine.