[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [SAGE] The danger of SSH keys..

On Mon, Jan 22, 2007 at 01:01:29PM -0600, Dustin Puryear wrote:
> 
> With keys, I want the ability to:
> 
> 3. Require private keys to have strong passwords (no realistic way to
> enforce this).
> 
> With this, I think the strength in using SSH keys could be
> dramatically increased.

Here is some research work that was done at NCSA to manage SSH public keys.
It takes the management out of the users control, and you can enforce
whatever type of pssphrase policy you want at the server:

    http://security.ncsa.uiuc.edu/research/ssh-remote-agent/


- Jim