News for hackers. Stuff that matters.

A comment on Fail2ban security update. Parent comment

Re:Fail2ban security update by sneak on Thursday July 17, 2014 @07:18PM (#8050794)
> How do you manage ssh keys once deployed? From personal experience using both systems, my thinking is that once you start deploying ssh keys, in a larger user/server environment, you have a massive rats nest. There is little to no life cycle management.

Same way you manage any other keys - configuration management software. "Keys are hard to manage" is not a valid argument against "you should not be using passwords or fail2ban".

[ Parent | on HN ]
Re:Fail2ban security update by pyre on Friday July 18, 2014 @01:28AM (#8051807)
Maybe I'm missing something, but where does fail2ban come in on the "keys vs. passwords" debate? Do I become more vulnerable if I run fail2ban on a keys-only ssh setup? If not, then why is the argument "don't use passwords or fail2ban" rather than just "fail2ban doesn't provide adequate protection for allowing passwords on ssh?"
[ Parent | on HN ]