[KLUG Members] ssh-keygen

[Richard Harding]

bert wrote:
> 
> Hi all,
> 
> When generating a ssh key with ssh-keygen I always use -t DSA.
> On the question to enter a passphrase, I always just press entre twice 
> (no passfrase).
> After reading the howto I am not sure anymore if this the most secure 
> choise.
> The howto explains that this passphrase will be used to encrypt the 
> private part of this file using 3DES.
> Is this good or bad? So should I enter a passfrase or better not?
> 
> 
> Tanks,
> Bert.
>

I much prefer to use a passphrase and then use ssh-askpass so that I 
only have to enter it once on boot. Then all of the work I do is with 
keys, a passphrase, and still not terribly annoying to use.

Rick