Hacker News new | ask | show | jobs
by skywhopper 2714 days ago
I can see how this might seem convenient, but using this service would be a really bad idea. The vendor even seems to know this:

    Sharing your public key is ok, but you should never
    share your private key (from the file id_rsa) with
    anyone. Instead, we've made it easy to create new
    Shellvault-specific keypairs.
Unfortunately, this only means that Shellvault creates the private key itself. Which amounts to "sharing your private key".

The lack of an end-to-end encryption tunnel means that despite the vendor's best intentions, this service introduces a lot of points at which a malicious actor (or accidental misconfiguration) could compromise your session.

In short, there are multiple good, free, native, and local SSH clients and terminal emulators for every platform. Use those instead.