Re: Are ssh keys tied to a user or the originating machine?

From	William Unruh <unruh@invalid.ca>
Newsgroups	comp.os.linux.security
Subject	Re: Are ssh keys tied to a user or the originating machine?
Date	2015-11-21 18:13 +0000
Organization	A noiseless patient Spider
Message-ID	<n2qc8a$39n$1@dont-email.me> (permalink)
References	<95o6ic-7c8.ln1@myleafnode.oneyv.org>

Show all headers | View raw

On 2015-11-21, JimR <NotReally@yahoo.com> wrote:
> I'm trying to better understand ssh.
>
> User foo on machine bar generates a keypair, and provides the public key 
> to remote user dokes on machine shme .   foo connects to dokes account 
> at shme, and everything is happy.
>
> Then user foo also has an account on machine baz.  He takes the private 
> key he generated on machine bar, and copies it to machine baz.  Can he 
> connect to dokes on shme?  My limited testing suggests that it works. 
> Is that a universal truth?

Yes
>
> Next, foo passes his private key to unrelated user thud on machine 
> grunt.  thud installs the private key owned by foo.  Can thud now 
> connect to user dokes on machine shme?
>
Yes-- but a really really bad idea.

> Next, replace the above ssh keys with PGP keys.  Do the same answers apply?

You think there is some sort of dna test that gets done? How in the
world wound anything know who is using the key?
>
> Thanks,
> JimR

Back to comp.os.linux.security | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Are ssh keys tied to a user or the originating machine? JimR <NotReally@yahoo.com> - 2015-11-21 13:01 -0500
  Re: Are ssh keys tied to a user or the originating machine? William Unruh <unruh@invalid.ca> - 2015-11-21 18:13 +0000
  Re: Are ssh keys tied to a user or the originating machine? Richard Kettlewell <rjk@greenend.org.uk> - 2015-11-22 14:09 +0000
  Re: Are ssh keys tied to a user or the originating machine? jc091966@gmail.com - 2018-06-03 19:25 -0700
    Re: Are ssh keys tied to a user or the originating machine? William Unruh <unruh@invalid.ca> - 2018-06-04 08:40 +0000
    Re: Are ssh keys tied to a user or the originating machine? "Carlos E.R." <robin_listas@es.invalid> - 2018-06-04 11:35 +0200
      Re: Are ssh keys tied to a user or the originating machine? Aragorn <thorongil@telenet.be> - 2018-06-04 12:24 +0200
        Re: Are ssh keys tied to a user or the originating machine? "Carlos E.R." <robin_listas@es.invalid> - 2018-06-04 13:15 +0200

csiph-web