3 ms·
The parent comment is discussing encryption of the private key with a password, not passwords for connecting to the server.
by infinite8s 11y ago
The parent comment is discussing encryption of the private key with a password, not passwords for connecting to the server.
- deathanatos 11y agoThe parent is discussing both, and I am too; specifically, the parent says, > we're not allowed to use key auth. i.e., they're using password based auth.¹ The point of my post is that while certainly users leaving the private key unencrypted isn't good, trading that for password auth leaves you in a worse state overall (IMO). ¹Of course, they could be using an auth scheme that is neither password nor key based. But given that the parent didn't come out and say that, my gut says that's not the case here.