DOSSIER 11 / 3 ARTICLES
SSH authentication, agents, and command-line workflows
Clarify authentication in both directions, then understand key protection and everyday operations.
Start with the first articleFollow the question further.
The client verifies the server's host identity, while the server verifies the user's identity through its authorization mechanisms. Start with directories and four kinds of authentication material, move through TOFU and out-of-band verification, then learn passphrases, agents, keyrings, and command-line configuration. Automatic desktop unlocking depends on the specific version and session integration.
- 01
Separate user keys from host keys first, then examine the continuity TOFU can guarantee and the first-contact authenticity it cannot.
SSH authentication: directories, keys, and TOFU
Distinguish user identity, server identity, and the limits of trust on first use.
Read article - 02
Follow private-key files, agent sockets, keyrings, and PAM layer by layer, paying particular attention to automatic unlocking and forgotten-passphrase conditions.
ssh-agent, passphrases, and keyrings
Understand the separate roles of private-key file protection, the agent signing interface, and desktop keyrings.
Read article - 03
Practice generating keys, checking the agent, inspecting configuration, and debugging connections in that order; verify the host fingerprint before the first connection.
SSH usage guide: command-line operations
Generate and manage keys, inspect client configuration, and debug authentication.
Read article