Re: ssh/keychain dilemma

[David Rosenstrauch <darose@xxxxxxxxxx>]

Bill Moseley wrote:
> On Wed, May 21, 2008 at 12:17:36PM -0400, David Rosenstrauch wrote:
> > I've been using ssh with a cron job to do backups for quite a while now.  
> >  But I'm realizing that the way I've been doing it (i.e., having the  
> > cron job ssh in using a key without a passphrase) is rather insecure. So 
> > I've been looking into ways to make the setup more secure by integrating 
> > a passphrase into the mix.
>
> Another point -- for backup operations maybe you should create a new
> key pair and use that only for that operation (by using "command=" in
> your authrized_keys file).

Alexander and Bill,

Thanks much for responding.  Good suggestions, both of you.  I'll take
some time and think this all through a bit more and then make a decision
on what's the best approach.

Thanks!

DR