[nycbug-talk] Hot Story: German Gov. intelligence agencies decrypt PGP, SSH

[nop]

On Sun, Jun 16, 2013 at 9:04 PM, George Rosamond <
george at ceetonetechnology.com> wrote:

> nop:
> > Have you rotated your keys and update the bits this year?
> >
>
> After you learn not to top-post and derail the thread!
>
> ;`
>
> (not used to talking to nope on talk at .. thought _nop only resided on IRC)
>
> Valid question...
>
> What are current protocols at peoples' work sites now?
>

Whenever.


>
> I know the Google forces SSH key pair changes frequently (monthly or
> even weekly?), which makes sense.  It's not like forcing regular passwd
> changes and users recycling passwds or writing them down as a forced bad
> practice.
>
> I assume people at least use different keys for work and personal.. and
> use passwds with SSH and GPG/PGP?
>

Natch.


>
> And that 2048-bit keys aren't a hassle to your CPU compared to 1024...
>

You can "share" a connection in openssh now, so there is no reason to get
crazy on those bits.

http://protempore.net/~calvins/howto/ssh-connection-sharing/


>
> g
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nycbug.org/pipermail/talk/attachments/20130616/22a66072/attachment.html>