[ale] automating ssh script

Ed Landa elanda at xeme.com
Mon Jul 29 21:16:02 EDT 2002


> What I don't know, and maybe someone can enlighten me....if someone hacks my
> system and steals my private key, and steals all the ssh-agent information,
> will that not also give them the same capability as if they had the passphrase?

No, the passphrase and key are two separate parts of the authentication
process.  The key roughly corresponds to "something you have", while the
passphrase is "something you know".  Only the combination of the two
serves as an authentication.

Ed


 PGP signature




More information about the Ale mailing list