Skip to Content [alt-c]

Comment

In reply to It's Now Possible To Sign Arbitrary Data With Your SSH Keys

Reader Michael on 2022-04-28 at 09:13:

FYI: As of OpenSSH 8.2 it's possible to protect SSH keys with a FIDO/U2F key, eg. a YubiKey. See eg. https://github.com/vorburger/vorburger.ch-Notes/blob/develop/security/ed25519-sk.md for instructions how to create such keys and links to further documentation/announcements.

Btw. with https://github.com/drduh/YubiKey-Guide PGP/GPG keys are way less scary. I've had unused PGP/GPG keys for years, but that changed once I've started storing my key on a smartcard (in my case a YubiKey, but others work as well). I'm now signing all my git commits and tags with PGP/GPG.

Reply

Post a Reply

Your comment will be public. To contact me privately, email me. Please keep your comment polite, on-topic, and comprehensible. Your comment may be held for moderation before being published.

(Optional; will be published)

(Optional; will not be published)

(Optional; will be published)

  • Blank lines separate paragraphs.
  • Lines starting with > are indented as block quotes.
  • Lines starting with two spaces are reproduced verbatim (good for code).
  • Text surrounded by *asterisks* is italicized.
  • Text surrounded by `back ticks` is monospaced.
  • URLs are turned into links.
  • Use the Preview button to check your formatting.