3 ms·
I don't want to be picky but this isn't two factor authentication in its usual sense. Two factor authentication uses two independent means/media to authenticate
by chmike 13y ago
I don't want to be picky but this isn't two factor authentication in its usual sense. Two factor authentication uses two independent means/media to authenticate. Protecting the private key with a password is required to protect it of beeing exposed when stolen. But if it's stolen then brute force password guessing is for free. Brute force attack against a login password can be detected and impaired, not with stolen private key.
- marcosdumay 13y agoYou must have the key, and know the password. Two factors.
- e12e 13y agoIt might have been true if it wasn't possible to get a copy of the plaintext key (eg: from ssh-agent). Actual two-factor authentication would be requiring proof of access to the secret key and a diffrent login password.