>enforce pw protected ssh keys
people will just use `a` as the pw :l_sure:

@romin
No need to, enforcing a complex password that would be unlocked together with system keychain looks easy.
On machines I use interactively, I run ssh-agent on login and enter this passphrase once — and yet this offers a degree of security against the keys being stolen. It's not perfect, but it's somewhat better than not having one 🤷

Follow

@romin
gpg-agent and ssh-agent are built on a similar principle, but are otherwise unrelated. Seriously, what's wrong with ssh-agent?

@romin
What does dbus have to do with all this, do you consider all software using local sockets broken?

Sign in to participate in the conversation
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml