{"comment":{"url":"https://api.github.com/repos/alokat/dename/comments/9488471","html_url":"https://github.com/alokat/dename/commit/b20185a78b4df28fe0b05e68fc966ea6a22d988a#commitcomment-9488471","id":9488471,"user":{"login":"alokat","id":207874,"avatar_url":"https://avatars.githubusercontent.com/u/207874?v=3","gravatar_id":"","url":"https://api.github.com/users/alokat","html_url":"https://github.com/alokat","followers_url":"https://api.github.com/users/alokat/followers","following_url":"https://api.github.com/users/alokat/following{/other_user}","gists_url":"https://api.github.com/users/alokat/gists{/gist_id}","starred_url":"https://api.github.com/users/alokat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alokat/subscriptions","organizations_url":"https://api.github.com/users/alokat/orgs","repos_url":"https://api.github.com/users/alokat/repos","events_url":"https://api.github.com/users/alokat/events{/privacy}","received_events_url":"https://api.github.com/users/alokat/received_events","type":"User","site_admin":false},"position":null,"line":null,"path":"","commit_id":"b20185a78b4df28fe0b05e68fc966ea6a22d988a","created_at":"2015-01-28T22:37:24Z","updated_at":"2015-01-28T22:37:24Z","body":"The thing is, that the private key should always be private - only the user should be able to modify it.\r\nAn unprotected key can be a sign of an attack.\r\n\r\nChange your SSH host keys to 777 and run SSH in debug mode:\r\n$ sudo /usr/sbin/sshd -d\r\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\n@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @\r\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\nPermissions 0777 for '/etc/ssh/ssh_host_rsa_key' are too open.\r\nIt is recommended that your private key files are NOT accessible by others.\r\nThis private key will be ignored.\r\nkey_load_private: bad permissions\r\nCould not load host key: /etc/ssh/ssh_host_rsa_key\r\n....\r\n\r\nMaybe go/tls does this not, because they want to be as generic as possible.\r\nIf the user needs a private key which has 755, than its his problem.\r\n\r\nBut I think that this is security risk and it's careless if a server does not protect\r\nits own private key(s)."}}