I remember the first time I set up a SSH key. I had no freaking idea what I was doing, or what the point is. I had been using a username/password login to get into a server for over a year at that point, and tbh I preferred it.

Public/private key cryptography is completely incomprehensible at first. But all of us learned it. Regular users will get there.

Reply to this note

Please Login to reply.

Discussion

Public/private key = username/password, but you can’t lose the password.

This description is good enough for 99% of use cases.

🤙

You can lose the private key though, can't you?

I remember the first time I setup ssh keys for server login. It felt like I was keeping a copy of a password on disk

And the UX still sucks.

But once you get it, typing in an SSH password seems quaint. I'm glad I had a basic understandingof keypair cryptography prior to learning bitcoin. Understanding some of the tech fundamentals made it much easier.

doubtful. normies still don't want to use 2fa. it's an extra step. an abstraction people can wrap their heads around easier will need to be developed first.

I agree. Learning how to use public/private key cryptography is an invaluable skill that I believe everyone will someday learn.

A step beyond that is learning how to write the functions yourself to sign and/or encrypt data using an algorithm.

I think it'd be good to have classes at every level of education where people are taught how to do these things.

Learning how to hold into your private key shouldn't be a big secret.

SSH keys are 10x more byzantine and baffling than Nostr key pairs thankfully. I don’t want to touch SSH for the rest of my life haha

Ah to feel like a n00b again. I recall struggling with permissions on authorized_keys. I find myself using ssh-copy-id , it's convenient. Also, have you heard of sshpass? sshpass -p user@host, maybe not that best practice but, again, convenient in certain environments.

With some FIDO implementations, the private key is stored in your phone's secure enclave chip, and you simply log in to web sites with your fingerprint or face id.