4 ms·
Nothing externally accessible should allow password login at all. SSH key-based logins are so much more secure and convenient as heck once you invest the time
by tempfs 8y ago
Nothing externally accessible should allow password login at all.
SSH key-based logins are so much more secure and convenient as heck once you invest the time to learn how they work.
- systematical 8y agoFor PCI you still need two factor. Its overkill, but we kept password logins even after having keys.
- amaccuish 8y agoA smartcard is still fairly convenient and allows you to tick the two-factor box (card + pin)