Add a note about password auth over SSH

This commit is contained in:
Kovid Goyal 2022-08-11 06:02:13 +05:30
parent 331f6d4903
commit ac9c85e783
No known key found for this signature in database
GPG Key ID: 06BC317B515ACE7C

View File

@ -203,6 +203,18 @@ disallow the remote control request. The user can choose to allow or disallow
either just that request or all requests using that password. The user's either just that request or all requests using that password. The user's
decision is remembered for the duration of that kitty instance. decision is remembered for the duration of that kitty instance.
.. note::
For password based authentication to work over SSH, you must pass the
:envvar:`KITTY_PUBLIC_KEY` environment variable to the remote host. The
:doc:`ssh kitten <kittens/ssh>` does this for you automatically. When
using a password, public key cryptography is used to ensure the password
is kept secure. This does mean that using password based authentication
is slower as the entire command is encrypted before transmission. This
can be noticeable when using a command like ``kitty @ set-background-image``
which transmits large amounts of image data. Also, the clock on the remote
system must match (within a few minutes) the clock on the local system.
kitty uses a time based nonce to minimise the potential for replay attacks.
.. _rc_custom_auth: .. _rc_custom_auth:
Customizing authorization with your own program Customizing authorization with your own program