You are reading a single comment by @hippy and its replies. Click here to read the full conversation.
  • PVK is just a proprietary file format for storing RSA private keys. There's nothing inherently wrong with that being the basis of encryption - it depends on how they use it. If GoAnywhere is using them to create SFTP connections then it's using the SSH protocol and that's the important thing.

    That settled, do you have a reason to think GoAnywhere is storing those keys in an insecure manner? That would be an issue.

  • do you have a reason to think GoAnywhere is storing those keys in an insecure manner?

    "Their initial suggestion was to rename examplekey.ssh to examplefile.pvk"

About

Avatar for hippy @hippy started