search

thinkst / opencanary

Modular and decentralised honeypot
http://opencanary.org
BSD 3-Clause "New" or "Revised" License
2.28k stars 357 forks source link

SSH private key record #207

Closed bbchylml closed 2 years ago

bbchylml commented 2 years ago

At present, SSH can record the password login information, but cannot record the private key information of private key login. Is it possible?

vin01 commented 2 years ago

For username and password based authenticattion, passwords are sent to the server. however when using publickey authentication, private keys never leave the client device. Only a signaturee is sent. So they are never directly exposed to the server (a big security benefit of using key based authentication instead of passwords)

bbchylml commented 2 years ago

@vin01 Thanks for your reply

jayjb commented 2 years ago

Thanks for the explanation @vin01.