Re: [gentoo-dev] disabling password authentication on dev.gentoo.org

[Luke-Jr]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 02 December 2003 02:47 am, Robin H. Johnson wrote:
> On Sun, Nov 30, 2003 at 09:09:18PM -0500, Kumba wrote:
> > I kinda got this figured out for cvs by dumping ssh keys from one of
> > my machines onto dev, but How will we copy our keys to get distributed
> > to dev now?
> Thats a very good question. In this case you'd have to go thru an admin
> for it to work, which would firstly produce a bottleneck, and secondly
> create more oppertunities for a possible security breach I think. The
> initial send of the ssh key would have to be verified as coming from a
> valid source (to stop some social engineering/taking advantage of
> timing).
DCC the ssh key through IRC or GPG sign an email with it. Not too complicated. 
SSH keys are short enough one could simply paste them in a chat anyway...
- -- 
Luke-Jr
Developer, Gentoo Linux
http://www.gentoo.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/y/4yZl/BHdU+lYMRAu1VAJ9NjJV/Uk54Mu7Cy7NbDHdmjcp0GgCfX0nq
9Z7RMauhJzH1i+sW/a5Wpm8=
=FYEI
-----END PGP SIGNATURE-----

--
gentoo-dev@g.o mailing list