X-Received: by 2002:a37:c347:: with SMTP id a68-v6mr10951379qkj.3.1528079124163; Sun, 03 Jun 2018 19:25:24 -0700 (PDT) X-Received: by 2002:a81:10d4:: with SMTP id 203-v6mr832821ywq.8.1528079123845; Sun, 03 Jun 2018 19:25:23 -0700 (PDT) Path: csiph.com!3.us.feeder.erje.net!feeder.erje.net!news.snarked.org!border2.nntp.dca1.giganews.com!nntp.giganews.com!x25-v6no2252623qto.0!news-out.google.com!k3-v6ni1838qtj.0!nntp.google.com!x25-v6no2252620qto.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail Newsgroups: comp.os.linux.security Date: Sun, 3 Jun 2018 19:25:23 -0700 (PDT) In-Reply-To: <95o6ic-7c8.ln1@myleafnode.oneyv.org> Complaints-To: groups-abuse@google.com Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=2601:589:4b80:2421:9dd3:2abb:9a74:7b4; posting-account=qTaotgoAAABq9d9JsxXrS3XJgZiqp0C8 NNTP-Posting-Host: 2601:589:4b80:2421:9dd3:2abb:9a74:7b4 References: <95o6ic-7c8.ln1@myleafnode.oneyv.org> User-Agent: G2/1.0 MIME-Version: 1.0 Message-ID: <6548cf87-2433-4276-bfa7-270a35962f7d@googlegroups.com> Subject: Re: Are ssh keys tied to a user or the originating machine? From: jc091966@gmail.com Injection-Date: Mon, 04 Jun 2018 02:25:24 +0000 Content-Type: text/plain; charset="UTF-8" Lines: 22 Xref: csiph.com comp.os.linux.security:730 On Saturday, November 21, 2015 at 1:10:09 PM UTC-5, JimR wrote: > I'm trying to better understand ssh. > > User foo on machine bar generates a keypair, and provides the public key > to remote user dokes on machine shme . foo connects to dokes account > at shme, and everything is happy. > > Then user foo also has an account on machine baz. He takes the private > key he generated on machine bar, and copies it to machine baz. Can he > connect to dokes on shme? My limited testing suggests that it works. > Is that a universal truth? > > Next, foo passes his private key to unrelated user thud on machine > grunt. thud installs the private key owned by foo. Can thud now > connect to user dokes on machine shme? > > Next, replace the above ssh keys with PGP keys. Do the same answers apply? > > Thanks, > JimR I just read your post. How about some appropriate names so we all don't have to keep track of whether "shit" refers to a machine or user. Hopefully someone else responded to this crap, coz I'm ticked off with the extra work deciphering your questions