INTL 3:770/1 3:770/3
REPLYADDR steveo@eircom.net
REPLYTO 3:770/3.0 UUCP
MSGID: <20240131082630.ca9c25d313abeb6aab09111b@eircom.net> 2fae8581
REPLY: 3f94ffdc
PID: SoupGate-Win32 v1.05
On Wed, 31 Jan 2024 07:03:10 +0000
Chris Green wrote:
> Scott Alfter wrote:
> > In article <-FadnQKrpYU-sir4nZ2dnZfqnPGdnZ2d@earthlink.com>,
> > For remote access (to a headless box or otherwise), you should be using
> > key-based authentication anyway and should disable password
> > authentication in sshd.
> >
> Why specifically?
The key phrase here is "for remote access".
> One argument against using key based authentication (in my case
> anyway) is that my home desktop and my laptop (which are the ssh
> clients) are turned on and logged-into just about all the time. Thus,
Yep the key(s) for remote access should not be the keys for local
access. Ideally they only get you onto a gateway machine from which you
access the rest by passwords or keys as you choose.
Some time back I decided this was too much hassle and set up a VPN
for outside access, now all I have to worry about are the VPN keys.
--
Steve O'Hara-Smith
Odds and Ends at http://www.sohara.org/
For forms of government let fools contest
Whate're is best administered is best - Alexander Pope
--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)
SEEN-BY: 10/0 1 15/0 90/1 103/705 105/81 106/201 128/260 129/305 135/225
SEEN-BY: 153/757 7715 218/0 1 601 700 840 870 930 220/70 221/1 6 226/17
SEEN-BY: 226/30 100 227/114 229/110 112 113 200 206 307 317 400 426
SEEN-BY: 229/428 470 550 616 664 700 240/1120 266/512 267/800 282/1038
SEEN-BY: 291/111 292/854 301/1 113 812 310/31 320/219 322/757 335/364
SEEN-BY: 341/66 342/200 396/45 460/58 633/280 712/848 770/1 3 100
SEEN-BY: 770/330 340 772/210 220 230 5020/400 1042 5058/104 5075/35
PATH: 770/3 1 218/840 221/6 301/1 218/700 229/426
|
