Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with openssh
Search options answers only
not deleted
user 37315
A free and open implementation of the SSH communication security tools.
1
vote
What is the difference between PEM format to DSA/RSA/ECC? (Might I confuse PEM with these)?
This new format is described in new openssh key format and bcrypt pbkdf. …
- 208k
3
votes
Accepted
Efficiently handling malicious, single connection attempts to a server?
... should I even bother to block these attempts?
If you are sure that none of these attempts will ever succeed (for example because password based authentication is not allowed anyway, only key bas …
- 208k
5
votes
How to prevent sharing SSH private keys by email
Details can be easily be found by using a search engine, e.g. search for openssh smartcard or similar. …
- 208k
3
votes
How does the weakness of SHA-1 introduce attack vectors in SSH?
Note that I'm not an expert in cryptography, so maybe ask this question too at crypto.se. From my understanding there are 3 places where SHA-1 was used and where it gets disabled now:
Use as hash alg …
- 208k
4
votes
Accepted
what are the disadvantages of running SSH daemon without root?
parts of it would need to run with elevated permissions because otherwise it would not be able to check users against a local password database, access the key information (like authorized_keys file in OpenSSH … If you compare this with the privilege separation architecture of the OpenSSH server then you will see that it runs critical parts with very low privileges and sandboxed so that a bug in these components …
- 208k
6
votes
When connecting to a server using ssh but you do not authenticate using a private key, what ...
The users key is used for authentication of the user only, similar to the optional client certificate in TLS (which includes HTTPS). Encryption is done with a key created using a key exchange algorith …
- 208k
3
votes
SSH and man-in-the-middle
It looks like you assume that the identity of the server is proven by the server demonstrating that he owns the presented public key. But this does not prove the identity of the server from the perspe …
- 208k
14
votes
Accepted
Does it weaken the encryption of SSH to use compression?
Compression before encryption is a problem if the attacker can control parts of the transferred data and then use the detectable compression ratio (i.e. amount of transferred data vs. original data) t …
- 208k
3
votes
Accepted
When hardening my SSH key, why would I use yubikey-agent instead of the built-in `-sk` key t...
To cite from Alternatives | Native FIDO2:
Native FIDO2
Recent versions of OpenSSH support using FIDO2 tokens directly. …
- 208k