Re: ssh private keys on our systems

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 +1

 Ramon Almeida.

 On Thu, 29 Sep 2011 14:19:25 -0600, Stephen John Smoogen 
 <smooge@xxxxxxxxx> wrote:
> On Thu, Sep 29, 2011 at 13:16, seth vidal <skvidal@xxxxxxxxxxxxxxxxx> 
> wrote:
>> Hi,
>>
>> I'd like to put a new policy in place which goes something like 
>> this:
>>
>> If you upload your private keys (encrypted or not) we will remove 
>> them,
>> then we will remove your public keys from FAS and force you to login 
>> and
>> give a new one in FAS.
>>
>> We do the last step on the basis that your private key, being on a
>> networked, multi-user machine is now exposed to the world and
>> potentially compromised. So we can no longer trust it.
>>
>> thoughts?
>
> +1 since publishing their private keys on a web page is probably not 
> allowed.
>
>> Thanks,
>> -sv
>>
>>
>>
>> _______________________________________________
>> infrastructure mailing list
>> infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
>> https://admin.fedoraproject.org/mailman/listinfo/infrastructure
>>

_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/infrastructure


[Index of Archives]     [Fedora Development]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux