New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Saisir la passphrase de sa clé ssh ne sert à rien lorsque ssh-agent fonctionne déjà. #2

Open

boupetch opened this issue Nov 23, 2015 · 0 comments

Contributor

boupetch commented Nov 23, 2015

Lorsque ssh-agent fonctionne, il stocke la passphrase ssh pour la session en cours. Redemander la passphrase à l'utilisateur ne sert à rien. SSH agent est une solution convenable et répondant à nos critères de sécurité lorsque bien utilisé.
http://rabexc.org/posts/pitfalls-of-ssh-agents
http://security.stackexchange.com/questions/39837/does-ssh-agent-store-the-ssh-key-passwords-in-cleartext-in-the-memory
http://rabexc.org/posts/using-ssh-agent
http://www.git-attitude.fr/2010/09/13/comprendre-et-maitriser-les-cles-ssh/
http://www.baekdal.com/insights/password-security-usability

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment