Comment

Comment by crimsonnoodle58

SSH keys can be limited by IP in authorized hosts.

The SSH port itself can be limited by IP in firewalls.

Finally, the SSH private key can be encrypted with a password.

Defense in depth is needed. Storing a ssh private key in plain text with no IP restriction is no different to having a password manager store your passwords in plain text on your HD.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton