[17794] in Athena Bugs
Re: linux [8.3.30]: ssh install
daemon@ATHENA.MIT.EDU (Jonathon Weiss)
Tue Apr 18 15:35:29 2000
Message-Id: <200004181935.PAA07973@Bearing-An-Hourglass.mit.edu>
From: Jonathon Weiss <jweiss@MIT.EDU>
To: tb@MIT.EDU (Thomas Bushnell, BSG)
cc: Jonathon Weiss <jweiss@MIT.EDU>, bugs@MIT.EDU
In-reply-to: Your message of "18 Apr 2000 11:21:54 EDT."
<u1haeirigdp.fsf@pusey.mit.edu>
Date: Tue, 18 Apr 2000 15:35:21 -0400
> Can you explain why? If a user does access_on, shouldn't ssh start
> working?
Well, it's true that the problem I'm concerned with could be described
as "If we put a key there, people will use it." The problem is that
ssh uses a public/private key pair, and the private key needs to be
just that, private. On a cluster workstation, virtually anyone could
walk up and collect the private key for later abuse.
Jonathon
