On Wed, Oct 12, 2011 at 02:18:20PM -0600, Kevin Fenzi wrote:
On Wed, 12 Oct 2011 22:13:11 +0200 Tomas Mraz tmraz@redhat.com wrote:
OK, but then you should not penalize also the people who keep their SSH private keys only on safe private computers.
We're sorry if it's causing you inconvenience. We have no way at all to tell apart the groups of people who understand keys and crypto and best practices from the people who should read the docs and information and learn about them.
If even just a few people learn and improve their practices, isn't it worth the small trouble to those that already understand?
Not really. How is this going to change the behaviour of the people who don't use good practices?
Rich.