[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ale] automating ssh script



> What I don't know, and maybe someone can enlighten me....if someone hacks my
> system and steals my private key, and steals all the ssh-agent information,
> will that not also give them the same capability as if they had the passphrase?

No, the passphrase and key are two separate parts of the authentication
process.  The key roughly corresponds to "something you have", while the
passphrase is "something you know".  Only the combination of the two
serves as an authentication.

Ed


 PGP signature