<story><title>SSH key and passwordless login basics for developers</title><url>http://opensourcehacker.com/2012/10/24/ssh-key-and-passwordless-login-basics-for-developers/</url></story><parent_chain></parent_chain><comment><author>apawloski</author><text>This was mentioned before, but if this post gains traction it&apos;s worth talking about again:&lt;p&gt;It is almost totally unnecessary to maintain multiple key pairs for multiple purposes if they&apos;re going to be stored on the same machine (eg separate key for github). If one of these services is compromised, an adversary will only get your &lt;i&gt;public&lt;/i&gt; key, which is useless. This is very different than the security practices of symmetric passwords.</text></comment>
<story><title>SSH key and passwordless login basics for developers</title><url>http://opensourcehacker.com/2012/10/24/ssh-key-and-passwordless-login-basics-for-developers/</url></story><parent_chain></parent_chain><comment><author>h2s</author><text>The output of &quot;man ssh_config&quot; is popular here lately isn&apos;t it? It was on the front page in a different guise only four days ago.&lt;p&gt;&lt;a href=&quot;http://news.ycombinator.com/item?id=4677049&quot; rel=&quot;nofollow&quot;&gt;http://news.ycombinator.com/item?id=4677049&lt;/a&gt;</text></comment>