openssh-unix-dev May 2011 archive
Main Archive Page > Month Archives  > openssh-unix-dev archives
openssh-unix-dev: Re: backdoor by authorized_keys2 leftovers

Re: backdoor by authorized_keys2 leftovers

From: Jameson Graef Rollins <jrollins_at_nospam>
Date: Wed May 11 2011 - 06:23:30 GMT
To: Dan Kaminsky <dan@doxpara.com>, Damien Miller <djm@mindrot.org>

On Tue, 10 May 2011 23:01:14 -0700, Dan Kaminsky <dan@doxpara.com> wrote:
> I'd document, rather than remove. I think all my systems use
> authorized_keys2. You will end up locking users and admins out.

I definitely agree with this sentiment.

I also think that being able to specify multiple authorized_keys files
is very useful, so I would prefer to just see this as a documented
feature.

jamie.

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev