Re:SSH: Best practices
by infinite8s on Sunday February 07, 2016 @09:38PM
(#11056111)
The parent comment is discussing encryption of the private key with a password, not passwords for connecting to the server.
[ Parent
| on HN ]
Re:SSH: Best practices
by deathanatos on Monday February 08, 2016 @03:58AM
(#11057064)
The parent is discussing both, and I am too; specifically, the parent says,
> we're not allowed to use key auth.
i.e., they're using password based auth.¹ The point of my post is that while certainly users leaving the private key unencrypted isn't good, trading that for password auth leaves you in a worse state overall (IMO).
¹Of course, they could be using an auth scheme that is neither password nor key based. But given that the parent didn't come out and say that, my gut says that's not the case here.