> are you a town resident that lost their ssh key? try this: using the email address with which you registered, send an email to root@tilde.town. put "new public key" in the subject. include the new public key in the body of the email
Hopefully they will at least reply to confirm the person can actually read the email instead of just replacing pubkeys from any forged from-address.
It’s also worth noting that there’s a multitude of ways one could take over these machines if they were determined enough. The entire principle behind this is giving people shell access for giggles. So we aren’t exactly taking about VPSs for serious business here.
While security is always important for anything online, it’s also important that security is balanced against appropriateness. Here the point is a little slice of the old days even though that does invite some risk.
Unless the admin doesn’t know how to run an email server in 2022.
This is exactly how credential reset works on every system with registered backup email address, include Google.
The only risk is if they send the key to the wrong email address, such as From and Reply-To.
You’re sending them your public key, not receiving a private key.