Hacker GitHub

← All repos

ccontavalli/ssh-ident

View on GitHub ↗ ★ 985 Python

Different agents and different keys for different projects, with ssh.

8 mentions on Hacker News by 2 people: 0 stories, 8 comments · first 2015-01-03 · latest 2020-04-30

Mentions per year 8 mentions · busiest year 2015 (2)
20082026
  1. I don't. Each agent gets one key, and that key alone. That's what helps. https://github.com/ccontavalli/ssh-ident is what I use to manage those agents - one agent per key.
  2. …servers. I have an SSH key for each "thing", and each key is kept in a different keyring via https://github.com/ccontavalli/ssh-ident , _precisely_ to avoid that problem. As an example, an attacker gaining root on my Oracle Cloud free…
  3. For SSH, I use one key per service, and manage them via https://github.com/ccontavalli/ssh-ident - to ensure that each connection only has access to the key it should, according to the configuration, have access to. I can't stress enough…
  4. …to an active SSH agent. Will it ever be able to create, and use, a DIFFERENT agent? I use https://github.com/ccontavalli/ssh-ident in order to have a different agent per "kind" of hosts, so that if I mistakenly ssh to Mallory's ssh server…
    comment by mfontani · 2017-09-20 · in Teleport 2.3 Released
  5. …of the box. You have to either alias ssh to ssh-ident, or provide the path to ssh-ident yourself. https://github.com/ccontavalli/ssh-ident
    comment by Sevrene · 2016-03-13 · in Ask HN: How do you manage your SSH keys?
  6. How about https://github.com/ccontavalli/ssh-ident ? Is that still a "best practice", since the author doesn't mention it in this blog entry?
    comment by mfontani · 2016-02-07 · in SSH: Best practices
  7. …server. It starts up a separate agent for each identity when you invoke it. You can find it at: https://github.com/ccontavalli/ssh-ident
    comment by Sevrene · 2015-08-05 · in Show HN: My SSH server knows who you are
  8. …to get it to work nicely. So it's not perfect, but it does solve the problem you talked about. * https://github.com/ccontavalli/ssh-ident
    comment by Sevrene · 2015-01-03 · in Why aren’t we using SSH for everything?