3 ms·
What benefit does locking the glass doors into a bank add to having time-locked vault? Defense in depth.
by asmithmd1 8y ago
What benefit does locking the glass doors into a bank add to having time-locked vault? Defense in depth.
- s3m4j 8y agoA port knock is just a clear password :/ I much prefer restricting port 22 to a few ip and disable passwords
- lakechfoma 8y agoNot with single packet authentication from fwknop http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#what-is-SPA http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#w...
- Operyl 8y agofwknop has a cache to prevent replay attacks, that plus the fact the packets are only valid for a certain length of time pretty much thwarts this. Remember, fwknop is _in addition_ to your existing security practices, it is not the only "password."
- rsync 8y ago"A port knock is just a clear password" It is only clear to the routers in your traceroute ... third party attackers cannot snoop on this traffic.
- sliken 8y agoRight, exactly like a clear text password.
- ryanlol 8y agoThe vault and the locked glass doors defend against entirely different things. Same doesn’t really apply for ssh keys and port knocking.