Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I agree with following comment.i was wrong. Thanks asdfaoeu for it.


> Private key is a "password", we need to treat it as such!

This is harmful advice in my opinion. A key has sufficient entropy to resist brute force attacks and is never directly exposed to a server. The same key between multiple servers is fine.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: