{"id":"ssh-key-based-authentication","text":"SSH key-based auth uses public/private key pairs. ssh-keygen generates keys (Ed25519 recommended). ssh-copy-id deploys public key. Permissions: ~/.ssh (700), authorized_keys (600). Private key never leaves client.","truth_value":"IN","source":"repo:entries/2026/03/04/ssh-key-auth.md","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"ssh-key-based-authentication","truth_value":"IN","reason":"premise"}]}}