4 ms·
That would give us access to the users account at any time. It seems requiring their password be sent with every request is more secure (over https, of course)
by tricknik 16y ago
That would give us access to the users account at any time. It seems requiring their password be sent with every request is more secure (over https, of course)
- pyre 16y agoThe thing that you are failing to realize is that it's easier to lock down access using a public key than a password. You can specify the amount of access an incoming ssh connection has based on the public key. You can't do that w/ a password. I could have multiple keys, all w/ different access levels, all on the same user account. There is no way to do this with a password, other than to just have separate user accounts.
- tricknik 16y agoI'm pretty clear on how ssh works. We can certainly add support keys as well, once we get the initial release out ;)