Re: ssh/keychain dilemma

[Bill Moseley <moseley@xxxxxxxx>]

On Wed, May 21, 2008 at 12:17:36PM -0400, David Rosenstrauch wrote:
> I've been using ssh with a cron job to do backups for quite a while now.  
>  But I'm realizing that the way I've been doing it (i.e., having the  
> cron job ssh in using a key without a passphrase) is rather insecure. So 
> I've been looking into ways to make the setup more secure by integrating 
> a passphrase into the mix.

Another point -- for backup operations maybe you should create a new
key pair and use that only for that operation (by using "command=" in
your authrized_keys file).

-- 
Bill Moseley
moseley@xxxxxxxx