4 ms·
If you want password auth, you already have to change a default setting in SSHD and restart it. How exactly is removing that as a option ‘less complex’ for the
by idunnoman1222 2y ago
If you want password auth, you already have to change a default setting in SSHD and restart it. How exactly is removing that as a option ‘less complex’ for the downstream distros?
- cedws 2y agoI don't really understand your question. Removing password auth reduces code complexity and therefore attack surface whilst also preventing users from using the software with a dangerous configuration. Maybe the users don't want that, but tough shit, maybe it's the nudge they need to use SSH keys.
- joshuaissac 2y agoIn practice, this will just result in people and organisations using the last version of OpenSSH that supports password authentication.
- PhilipRoman 2y agoLast time I checked "apt install openssh-server" on debian still launched sshd with password login enabled