4 ms·
That's an excellent point. I painted myself into a corner here because I am letting some of my friends use the server as well. Have to gently transition them to
by Topolomancer 5y ago
That's an excellent point. I painted myself into a corner here because I am letting some of my friends use the server as well. Have to gently transition them to public key usage only now.
- bombcar 5y agoYou can restrict password auth to particular users/groups, which also greatly reduces the attack vector.
- Filligree 5y agoOr require OTP for password authentication.
- namibj 5y agoGive them a reasonable deadline, and just disable password login afterwards. This isn't something they should have trouble understanding/accepting.