From: Daniel Carrera <dcarrera@...>
Date: 2003-04-14T08:23:59+09:00
Subject: Re: Controlling an interactive program from Ruby

On Sun, Apr 13, 2003 at 06:38:19PM +0900, Brian Candler wrote:
> The passphrase on an ssh key tends to be equally weak (or totally
> non-existent, if Daniel's running ssh with RSA/DSA but empty passphrase).

Well, I'm not.  I realize how silly that would be.  My passwords are 
acutally fairly good.


> Otherwise, the main difference is that only a public key is stored on the
> server side, not an encrypted password. If someone breaks into the server,
> they can't do a dictionary attack against a public key.
> 
> There are lots of other side-benefits to RSA/DSA authentication though - for
> example being able to use the same key on lots of systems without any
> security drawbacks, and being able to change the passphrase on your private
> key whenever you like without having to log into all those systems. Strongly
> recommended.

That's interesting.  Where can I learn more about that?
I understand RSA from a mathematical perspective, but I'm not familiar 
with these other advantages you point out.

-- 
Daniel Carrera
Graduate Teaching Assistant.  Math Dept.
University of Maryland.  (301) 405-5137