Post #3326770
2026-06-15 16:50 UTC
@eltonfc@bertha.social ssh with password auth is a bad idea. But if you use key auth, and disable password auth entirely, I don’t imagine they should have a problem.
Replies (1)
-
@mkj@social.mkj.earth 2026-06-15 17:03
@RoganDawes@infosec.exchange Or use strong passwords and a restricted set of accounts allowed to log in over SSH. If your root password is password123!, then sure, having SSH publicly accessible and with password-only authentication is a bad idea. But if the only account that can log in over SSH is an unprivileged one with a password like `gIrD9T4t.639IV1TJLNUN2ruVt6Igc0iUE3nKdt7l6eGl10trJ2lhhiVJTeiGr9`? How would that be significantly worse than key pair authentication? @eltonfc@bertha.social