3 ms·
I don't understand this sentence at the end of keys section > And I'll let you in on a dirty little secret: you can even match on interface in your sshd config
by spindritf 13y ago
I don't understand this sentence at the end of keys section
> And I'll let you in on a dirty little secret: you can even match on interface in your sshd config for things like these
I don't get the secret. Only allow logins from certain IP ranges for each user/key?
- dsr_ 13y agoI haven't tried it, but perhaps you can allow passwords from an interface that's internal, while requiring keys from the outside? Not much gain. Keys (plus good passphrases, plus a decent manager) are a big win.