Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Mar 1998 15:09:58 -0600 (CST)
From:      Shawn Leas <sleas@mn26hp6.honeywell.com>
To:        Jos Backus <J.G.E.Backus@urc.tue.nl>
Cc:        Matthew Hunt <mph@pobox.com>, questions@FreeBSD.ORG
Subject:   Re: ssh and scp
Message-ID:  <Pine.HPP.3.96.980318150902.14423A-100000@mn26hp6.honeywell.com>
In-Reply-To: <19980318111124.A13158@asterix.urc.tue.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 18 Mar 1998, Jos Backus wrote:

> 	Hi Matthew,
> 
> On Tue, Mar 17, 1998 at 01:05:55PM -0500, Matthew Hunt wrote:
> > Make sure that ~/.ssh/identity.pub exists on client.  It is normally
> > there, as long as you have used ssh before.
> 
> identity.pub contains my public key, right?
> 
> > Append the contents of that file to ~/.ssh/authorized_keys on server.
> > If that file doesn't exist, create it with the contents of client's
> > identity.pub.
> 
> What prevents somebody from storing my public key in his ~/.ssh/identity.pub
> and logging into server as me?

You are forgetting, opnly you have the secret key needed to make the
public key useful.  That is, if ssh uses a public/private key approach.

Shawn

> I must be missing something here, but what?
> 
> -- 
> Jos Backus                     _/  _/_/_/        "Reliability means never
>                               _/  _/   _/         having to say you're sorry."
>                              _/  _/_/_/                -- D. J. Bernstein
>                         _/  _/  _/    _/
> jbackus@urc.tue.nl      _/_/   _/_/_/             use Std::Disclaimer;
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.HPP.3.96.980318150902.14423A-100000>