Thoughts on having SSH allow password authentication from the Internet

Re:Thoughts on having SSH allow password authentication from... by saurik on Saturday January 18, 2025 @05:40AM (#42747382)

I think "anywhere" here has to mean "any random device you come across", not merely "any strange location", as the premise is being able to log in with just a password rather than a key... I often use my phone to do tasks, but I do it with an ssh key on my phone.

[ Parent | on HN ]

Re:Thoughts on having SSH allow password authentication from... by kenhwang on Saturday January 18, 2025 @05:56AM (#42747476)

Back when I worked from my phone while in the ski lift line, the solution really is to keep an SSH key on the phone if I intended to do any work from it.

If I really had to access work resources from any random device, I'd go through the ordeal of logging into the SSO to log in to the web console to open a temporary cloud SSH session with the multiple layers of 2FA and probably even SecOps manual approvals that's likely required.

[ Parent | on HN ]

Re:Thoughts on having SSH allow password authentication from... by commandersaki on Sunday January 19, 2025 @04:04AM (#42755299)

For some reason I don't mind an ephemeral SSH session on a random device but I'm less likely to do webmail/email.

[ Parent | on HN ]