[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: FTP access to master.debian.org



"Brian C. White" <bcwhite@verisim.com> wrote:
>The man page said you should only generate a pair without a pass phrase
>if you knew what you were doing.  I suppose this is because now anybody
>who broke into my account would also have access to my account on master?

Exactly. Not only that, but to any account with your ssh public key listed
as an authorised key. (In this regard, it's a little more secure than
rlogin, etc.: DNS/IP spoofing won't work for ssh.)


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com


Reply to: