Do not recommend passphrase-less SSH keys, please!
Posted by: Administrator
on November 10, 2004 11:09 AM
A fine article, but telling people to use no passphrase on their SSH keys is unwise at best. It certainly does not make a "secure" backup. A good passphrase on a key (SSH, GPG, whatnot) makes all the difference.
Using tools like <A HREF="http://www.gentoo.org/proj/en/keychain/index.xml" title="gentoo.org">keychain</a gentoo.org> or some other manipulation of ssh-agent on the backup repository and pulling the data negates the temptation to use such an insecure method.
Do not recommend passphrase-less SSH keys, please!
Posted by: Administrator on November 10, 2004 11:09 AMUsing tools like <A HREF="http://www.gentoo.org/proj/en/keychain/index.xml" title="gentoo.org">keychain</a gentoo.org> or some other manipulation of ssh-agent on the backup repository and pulling the data negates the temptation to use such an insecure method.
#