3 ms·
SSH key verification...
by gsich 9y ago
SSH key verification...
- dredmorbius 9y agoServer key? Sure, but what's the accept rate on new keys? On short-lived, poorly provisioned, AWS instaances, as just one example. Again, percentages. With enough attempts, some will succeed.
- gsich 9y agoIf it's a new server (like your example) there should be no other user already logged in. If it's not new, then you'll get a warning. And focusing on the "shortlived", so the damage is also shortlived... I can only speak for myself, if other people are ignoring warnings, it's their problem.
- dredmorbius 9y agoThe original question was: what's the risk, or threat model. I believe that's been adequately addressed.
- nitrogen 9y agoThe other question is whether other risks are greater; if a high port number is your only choice, or handled by port forwarding on a router, or you are the only user, or high numbers are scanned sufficiently less often, then maybe you still choose one.
- dredmorbius 9y agoQuite. Though, as you note, another question. Restricting the remote IP range is another option.