4 ms·
Hmm. They email your initial root password in cleartext, rather than either letting me choose it or displaying it on the site, both of which would be over SSL.
by danellis 14y ago
Hmm. They email your initial root password in cleartext, rather than either letting me choose it or displaying it on the site, both of which would be over SSL.
- signifiers 14y agoIf you use keys, no password is sent. An option to not send password by mail (for non-key-based launches) is on the coming-soon roadmap: http://digitalocean.uservoice.com/forums/136585-digital-ocean/suggestions/3566070-add-a-checkbox-to-not-email-root-password http://digitalocean.uservoice.com/forums/136585-digital-ocea...
- danellis 14y agoYou should probably make it clear during server creation that if you have added SSH keys on the web site, they will be injected into ~root/authorized_keys in the image, if that's what you do. Linode, for example, lets you add SSH keys on their web site, but that's only to access your VM's console.