Hacker News new | past | comments | ask | show | jobs | submit login

Nit: You do not "send your keys" to the SSH server. You only sign a statement using them. The statement contains some session data that is generated by the server and client together while setting up the session; this makes the signature useless for trying to impersonate the client in any future or concurrent connections.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: