4 ms·
Not if you set it up such that each knocking sequence can only be used once. Port knocking is a flexible concept.
by jolmg 3y ago
Not if you set it up such that each knocking sequence can only be used once. Port knocking is a flexible concept.
- squigz 3y agoI wonder if one could combine port knocking and TOTP in some way, so the sequence is determined by the TOTP? (Security is not my thing; don't judge me!)
- noman-land 3y agoWas just having the same thought reading this thread.
- ametrau 3y agoYeah you could but wouldn’t it defeat the purpose of being basically a secret knock before you can give the password? The password should be the ssh password.
- cesnja 3y agoThis would be just to allow you to connect to the server. If there was a vulnerable sshd on port 22, an adversary would have to know the port knocking sequence to connect to sshd and run the exploit.