logoalt Hacker News

grey-areayesterday at 7:03 AM3 repliesview on HN

Doesn’t it try one key at a time rather than send all?


Replies

bauruineyesterday at 7:50 AM

True but a server that wants to "deanonymize" you can just reject each key till he has all the default keys and the ones you added to your ssh agent.

You can try it yourself [0] returns all the keys you send and even shows you your github username if one of the keys is used there.

[0] ssh whoami.filippo.io

show 1 reply
unsnap_bicepsyesterday at 7:18 AM

It does, and there's typically a maximum number of attempts (MaxAuthTries defaults to 6 IIRC) before the server just rejects the connection attempt.

show 1 reply
rwmjyesterday at 9:46 AM

Modern sshd limits the number of retries. I have 5 or 6 keys and end up DoSing myself sometimes.

show 1 reply