Re: Accounts on debian.org machines

[Matthew Garrett <mgarrett@chiark.greenend.org.uk>]

Steve Langasek wrote:

>But an ssh key on removable media is not vulnerable to keysniffing
>alone, where a password is.

If such behaviour becomes common, the keysniffers will simply copy
anything that looks like an SSH key that exists on an item of removable
media. There's no inherent increase in security from using a key on a
USB device other than the fact that attackers aren't thinking about that
yet.
-- 
Matthew Garrett | mjg59-chiark.mail.debian.devel@srcf.ucam.org