Signing in to websites with SSH
vtllf.org
Signing in to websites with SSH
1–10 of 169 posts
Re: Signing in to websites with SSH
#2An SSH key is equivalent to a (self-signed) SSL client certificate. I would love to see an easy way to use your SSH key as a client certificate - either an external tool or the browser itself could support this.
Re: Signing in to websites with SSH
#3I love the idea, I think I'll implement something like that to automatically log into the few services I host on my webserver: on machine boot and every hours `ssh webserver echo $SOURCE_IP > token`, and on the web app, if token is not too old in source address == $(cat token), then auto login.
Re: Signing in to websites with SSH
#4Interesting; this could potentially solve a pain point for me. I run a small set of services for some research collaborators and have been phasing out passwords, so users are authenticated solely via their public keys. That works for most classic "Unix server" stuff. But for the use-case of a remote GUI for scientific computing, the classic solution of network-transparent X is gradually losing out to a more iPython-style solution of a browser front-end. In which case I need to authenticate the same people in their browsers, and it'd be nice to do it via the same public keys.
Re: Signing in to websites with SSH
#5I like alternative two, except that I'd have it be
ssh @ auth
Regarding the part where he said:
>Running a custom SSH server along side a web server is not convenient. There is no good equivalent to the HTTP Host header, so hosting multiple SSH servers on a single IP address doesn’t work well.
That's not a problem. Your server got the host header over HTTP. When you generate the token, just tie the token to that host name.
Re: Signing in to websites with SSH
#6Wow. I just have one question for you: why?
Have you ever heard of TLS and client certificates? Every browser and every decent web server supports TLS with a client certificate for auth.
Re: Signing in to websites with SSH
#7A brilliant Idea; as far as usability for a normal user is concerned, How feasible is it to modify a browser to take the command directly via the address bar, and internally a thread can handle the ssh part, redirecting the user directly to the newly generated link ?
Re: Signing in to websites with SSH
#8Wow. I just have one question for you: why? Have you ever heard of TLS and client certificates? Every browser and every decent web server supports TLS with a client certificate for auth.
What I thought, exactly.
Re: Signing in to websites with SSH
#9A brilliant Idea; as far as usability for a normal user is concerned, How feasible is it to modify a browser to take the command directly via the address bar, and internally a thread can handle the ssh part, redirecting the user directly to the newly generated link ?
Would be feasible as a firefox addon since those have the same privileges as the browser process itself.
Afaik chrome's extension APIs are too restrictive to allow for something like that.
Re: Signing in to websites with SSH
#10A brilliant Idea; as far as usability for a normal user is concerned, How feasible is it to modify a browser to take the command directly via the address bar, and internally a thread can handle the ssh part, redirecting the user directly to the newly generated link ?
Not that hard (I've written Firefox extensions that run external programs), but what would you gain over SSL client certs, which are already supported?