Don't use 1234 as your password

Re:Don't use 1234 as your password by D9u on Sunday November 17, 2013 @10:19PM (#6752297)

Why not disable password logins completely, use PKI for all connections, and while we're at it, restrict logins to known hosts?

Also, don't use passwordless keys.

Then there's moving sshd off of port 22 to provide some obscurity.

Yada yada yada... How many times will we have to go over this subject?

[ Parent | on HN ]

Re:Don't use 1234 as your password by dredmorbius on Monday November 18, 2013 @12:07AM (#6752678)

Is there any way server-side to determine if a key is passwordless or not?

[ Parent | on HN ]

Re:Don't use 1234 as your password by dsl on Monday November 18, 2013 @12:27AM (#6752753)

Not from the public key.

[ Parent | on HN ]

Re:Don't use 1234 as your password by dredmorbius on Monday November 18, 2013 @02:48AM (#6753182)

That's what I thought. It's always struck me as a limitation of the ssh auth approach. While I can't insist on a good password, I'd like to be able to insist upon password-protected keys (at least as a default -- exceptions for some system processes / activities).

[ Parent | on HN ]