Path: csiph.com!xmission!news.alt.net!news.astraweb.com!border5.newsrouter.astraweb.com!not-for-mail Newsgroups: comp.os.linux.security X-Mozilla-News-Host: news://localhost:119 From: JimR Subject: Are ssh keys tied to a user or the originating machine? Date: Sat, 21 Nov 2015 13:01:44 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.1.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Message-ID: <95o6ic-7c8.ln1@myleafnode.oneyv.org> Lines: 19 Organization: Unlimited download news at news.astraweb.com NNTP-Posting-Host: 95a1cf3a.news.astraweb.com X-Trace: DXC=3g1^:l;9iAUWIOATn\8amXL?0kYOcDh@Z9[TW:2INN;TJoZ66_70GPVYQf14IcFVEQRJXO^\?_5XYnle9@`UnW1\O2`^A;W[liV=_3bUR97Em] Xref: csiph.com comp.os.linux.security:677 I'm trying to better understand ssh. User foo on machine bar generates a keypair, and provides the public key to remote user dokes on machine shme . foo connects to dokes account at shme, and everything is happy. Then user foo also has an account on machine baz. He takes the private key he generated on machine bar, and copies it to machine baz. Can he connect to dokes on shme? My limited testing suggests that it works. Is that a universal truth? Next, foo passes his private key to unrelated user thud on machine grunt. thud installs the private key owned by foo. Can thud now connect to user dokes on machine shme? Next, replace the above ssh keys with PGP keys. Do the same answers apply? Thanks, JimR