3 ms·
If we really wanted MFA, we could roll a PAM module, and whatever pushes SSH authorized keys could also push MFA seeds. But IMO this would protect against very
by themoonisachees 3y ago
If we really wanted MFA, we could roll a PAM module, and whatever pushes SSH authorized keys could also push MFA seeds. But IMO this would protect against very unusual attacks and annoy ssh agents users everywhere.
- throwawaymobule 3y agoDoing MFA for ssh like that would satisfy some compliance issues, wherever that matters. Probably key+pass.
- siilikuin 3y agoLol. I actually use `ssh` with 2FA at my own job, I was just having some fun nerdsniping. You're right, it's very valuable for compliance reasons