With Bitwarden, you can store your SSH keys and use the desktop app to expose a SSH agent socket.
Some SSH servers have a MaxAuthTries configured with a low value.
If you use a SSH agent loaded with more keys that the MaxAuthTries value, and the required key is not in the MaxAuthTries first tried keys, you get an authentication error.
In CLI, you just pop a new SSH agent, load it with the "only key you need" and off you go.
With Bitwarden, you cannot do that (I think).

I have been thinking about implementing a SSH agent proxy that connects to Bitwarden, lists the keys available, and create a new agent per listed key, answering only for that key.
You could then configure SSH to use that SSH agent socket or that other SSH agent socket depending on the host you connect to, with IdentitiesOnly and an IdentityAgent pointing to the right SSH agent socket.

What do you think? Would you use that proxy?

#Bitwarden #infosec #ssh #authn

Je conseillais encore hier d'utiliser #bitwarden un gestionnaire de mot de passe ... en ligne ... 🤡🤷‍♀️

"Researchers from ETH Zurich have discovered serious security vulnerabilities in three popular, cloud-based password managers."

Heureusement je mentionne toujours aussi un gestionnaire local comme #keepassDX et #keepassXC aussi 😬 (1/2)

#Bitwarden, #Ente, and #Proton offer excellent services and tools, and together they can build a beautiful ecosystem.

Ente's new product is Locker https://ente.io/it/locker, and Proton's latest products are Proton Meet and Proton Sheets.

Security through transparency: ETH Zurich audits Bitwarden cryptography against malicious server scenarios

https://slrpnk.net/post/34359981

Vaultwarden is a lightweight Rust reimplementation of the Bitwarden server API. Runs on SQLite, idles at ~50MB RAM, and is fully compatible with all official Bitwarden clients.

Features that Bitwarden reserves for paid plans? Free in Vaultwarden.

Docker setup: https://selfhosting.sh/apps/vaultwarden/

#selfhosted #vaultwarden #bitwarden #security #passwords #foss #opensource #docker #homelab

Gillar vad jag hörde i https://youtu.be/krN4WMj8PIA om hur #Bitwarden hanterat forskningsrapporten om säkerhet i sin lösenordshanterare.

Ett praktexempel på varför #OpenSource är det rätta för det mesta.

Var också intressant få veta Bitwarden jobbar på en omdesign av logiken, som kommer fixa minst ett av problemen som inte går fixa tillräckligt smidigt i nuläget.