On: Show HN: Kryptonite – a new home for your SSH private key

[4kevinking]

Any user-level application on your computer can read the SSH key -- you'll never know if it's used or sent off somewhere. Even passphrase encrypted keys are vulnerable. Check out this blog post for a deep dive on our threatmodel and why you should store your SSH key on your phone https://blog.krypt.co/why-store-an-ssh-key-with-kryptonite-9...

[_pfxa → 4kevinking]

Well the phone is at least equally insecure, given it's often way more opaque than a computer.

[tptacek → _pfxa]

No, the opposite is true. See upthread.