Mastodawn

Thank you @Kovah for your detailed article. This shows what the current #SSH keys #security is. Now ALL of us just have to realize and implement this:

«Why and How: Switch from #RSA to #EdDSA / #ED25519 SSH keys»

🔏 https://blog.kovah.de/en/2019/switching-from-rsa-to-eddsa-ec25519/

Why and How: Switch from RSA to EdDSA/ED25519 SSH keys

Kevin Woblick's Blog

Show thread

HcInfosec Feb 25, 2024

@kubikpixel @Kovah whats the impact of actually doing this:
DO NOT SKIP SETTING A PASSPHRASE!

non of your scripts work anymore?

Show thread

casraf 🇮🇱Feb 25, 2024

@HcInfosec As he mentions in the article, it has security repercussions.

It is basically leaving the door open - if the private file gets taken from you, the hacker can just immediately use it.

If you set a passphrase, it leaves another layer of security for a case when someone gets hold of your keys.