3 ms·
>The downside is that I allow "root SSH", contrarily to every single best practice out there. The upside... Well. Is that there's no "sudo" installed on my work
by gsich 3y ago
>The downside is that I allow "root SSH", contrarily to every single best practice out there. The upside... Well. Is that there's no "sudo" installed on my workstation.
Allowing root login is fine. The best practice is not to allow passwords for root login.
- TacticalCoder 3y ago> The best practice is not to allow passwords for root login. My sshd is configured to not allow passwords logins at all: it's U2F/Yubikey only.
- gsich 3y agoI somewhat like smartcards more. Takes use of the slot, not wasting rare USB ports on notebooks. I don't why there are so few USB ports, but that's another discussion.
- johnklos 3y agoThe even better than "best" practice is to not allow passwords for any login. Keys really aren't that hard.