Comment - FBXL Lotide

Comment on How secure is my local backup drive with ssfhs?

keep the key safe

This might be a dumb question, but can I assume the keys are safe in the standard .ssh directory on Linux? Is there anything I should explicitly do to secure the private key?

original

Sort:hotnew top

irmadlad@lemmy.world ⁨4⁩ ⁨days⁩ ago
You should be good with caveats:

Permissions on: ~/.ssh: chmod 700 ~/.ssh

Permissions on private keys: chmod 600 ~/.ssh/id_rsa or id_ed25519, etc.

Permissions on public keys: chmod 644 ~/.ssh/id_rsa.pub
original
- needanke@feddit.org ⁨4⁩ ⁨days⁩ ago
  And of course encrypting the drive the files are on.
  
  original
kevincox@lemmy.ml ⁨4⁩ ⁨days⁩ ago
Generally speaking it will be fine. SSH will also refuse keys with open permissions so you would notice if it was wide-open to other users of the device.

But you know if you are running random code or AI harnesses as that user it can be at risk. Or if you copy around the key all over the place it is more likely to leak. But generally speaking you are secure by default, just don’t do something dumb with the key and you’ll have no problems.

original