Skip to content

Support no-touch-required security key (e.g. ecdsa-sk)

In contrast to the comment #213259 (comment 827207788) given in another issue, I want to point out that even a no-touch-required security key backed ssh key is still a major improvement over using a "normal" ssh key. The no-touch-required can not be simply copied/"stolen", i.e. only works if the corresponding key is present in the machine.

I do not object that it would be way more secure to require an interaction. However, requiring an interaction for each remote action can be a major showbreaker imho. Therefore, it would be nice to have the additional option of no-touch-required keys. (Allowing to have keys which require interaction and others which do not)

This option would not distrubt the current user flow and also allow some batch/automation on the user machine as long as the security key is connected.