6 ms·
What, in practice, is the difference between creating an account and SSH key that gives passwordless sudo (or other authorization) and creating an account and p
by AaronFriel 13y ago
What, in practice, is the difference between creating an account and SSH key that gives passwordless sudo (or other authorization) and creating an account and password that gives appropriate authorization?
- VikingCoder 13y agoYou have to possess the SSH key, but any keylogger could record the password? Passwords can be guessed?
- AaronFriel 13y agoIf you have the ability to install a keylogger that can hijack a user session, what prevents you from capturing the SSH key of the user?
- pnathan 13y agoI can generate a unique pair of ssh keys for each client that has to remote into a system; I have to have a consistent password for the same user across all systems (assuming integrated login). Supposing that a keyfile is copied, the multiplicity of ssh files limits the damage.