3 ms·
I understand how they all provide (good) value for MANAGING ssh keys, but respectfully, I don't understand how/that they harden ssh at all? Why does SSH need h
by stevenjgarner 4y ago
I understand how they all provide (good) value for MANAGING ssh keys, but respectfully, I don't understand how/that they harden ssh at all? Why does SSH need hardening? I get that if a user is mis-managing keys that is a problem, but it is not necessarily an ssh problem.
- akerl_ 4y agoHardening SSH doesn’t generally mean “making the openssh process more secure”. It means “making connecting to your servers more secure”. So turning off password auth, or restricting network access to the SSH daemon, or using stronger centralized auth all do that. Most of the risks that affect SSH are around credential lifecycles, weak credentials, and credential compromise.