3 ms·
My use case is the same as yours. Malware can steal your credentials, it cannot steal mine. I also don't need fail2ban or to configure any of these new OpenSSH
by sneak 2y ago
My use case is the same as yours. Malware can steal your credentials, it cannot steal mine. I also don't need fail2ban or to configure any of these new OpenSSH features. Users added to the server can't get compromised due to use of weak passwords.
Passwords are obsolete in 2024, and using them is very nearly universally bad.
- joelthelion 2y ago> I also don't need fail2ban or to configure any of these new OpenSSH features Me neither. If your password has sufficient entropy, you don't need any of this. > Malware can steal your credentials, it cannot steal mine The only solution around this is a hardware key or MFA. I find the convenience of not needing anything with me to be superior to the low risk of malware. I understand your opinion may differ here.
- DEADMINCE 2y ago> Passwords are obsolete in 2024, and using them is very nearly universally bad. The first claim is obviously nowhere near being true, and the second seems very subjective. As the other user is saying, strong passwords with proper security have minimal risk. More than certs or keys yes, but they offer sufficient security and the balance with convenience is currently unbeatable. Besides, even if someone gets access to your server they should be limited and unable to do any real damage anyway. Defense in depth and all that.