home.social

#workstories — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #workstories, aggregated by home.social.

  1. #WorkStories:
    Someone from my company needs SSH access to some special, new machines hosted by a service provider. So, how do you securely exchange SSH keys?

    The process that the nontechnical people came up with:
    The service provider creates an #SSH key pair and sends us the private key via e-mail.
    But they don't want to send over the SSH private key *unencrypted* via e-mail, that would be insecure. So someone should generate a #PGP key pair, send the public key to the service provider (via e-mail), who would encrypt the SSH private key with it and then send it via e-mail.

    I can't decide whether I should be rolling on the floor laughing, crying in a quiet corner of the office or banging my head against the wall.

    :blobcatdizzy: :blobcatfacepalm: :blobcatgoogly:

    #cryptography #publickeycryptography #publickeycrypto