Infosec-Notes

Infosec-Notes copied to clipboard

Clean and organize SSH Keys section of the SSH/SCP page.

May need additional information

Potentially needs relative key strengths, public key data length (for sending through restricted environments)

The ssh guide is completely useless for 1. setup, 2. troubleshooting, 3. quirks of gpg-agent (pinentry-tty is a mess) and most relevant, ssh-copy-id does not allow key separation. Meaning, one may want to enable temporary password-based setup, but ssh-copy-id has no way to apply a specific gpg config.

My dotfiles template is a mess I learned from ssh during microcontroller setup [hacks], but you could take some stuff from there: https://github.com/matu3ba/dotfiles/blob/master/templates/ssh.

What would be more cool, would be wireguard + ssh (https://rair.dev/wireguard-ssh/) to hide ssh altogether.