For clarity, yes I did say certs. But even good old SSH keys are a million miles better than passwords. I guess I should have said "Public Key Authentication"

For clarity, yes I did say certs. But even good old SSH keys are a million miles better than passwords. I guess I should have said "Public Key Authentication" since that would be more reflective of a desirable baseline SSHD configuration.