On Thu, Aug 31, 2017 at 8:45 AM, Norbert Hartl <norbert@hartl.name> wrote:

> Am 31.08.2017 um 03:32 schrieb Sean P. DeNigris <sean@clipperadams.com>:
>
> https://github.com/pharo-vcs/iceberg/blob/master/README.md suggests to
> configure Iceberg with the "Use Custom SSH Keys" setting, part of which
> seems to include pasting one's SSH Key Passphrase into Pharo's settings. Is
> that a good idea (i.e. is that safe)?
>
>
Not at all!

Just about as safe as storing credentials for SmalltalkHub. (and to be fair, STHub is even worse in that the connection is not encrypted. Imagine someone observing traffic on PharoDays/ESUG conf.)

If you are not giving your work image to anyone else, I don't see what difference it would make. And if you are worrying about malicious code extracting it from your settings... I would be more worried about full access to your system...

Peter