Agreed. Contrary to the naysayers, port knocking is an unalloyed good. Whatever your setup is, it's better if it doesn't show up in a scan at all. The "knock

Agreed. Contrary to the naysayers, port knocking is an unalloyed good. Whatever your setup is, it's better if it doesn't show up in a scan at all. The "knock is a weak password" argument is silly - nobody suggests using only the knock, but rather to use the knock in addition to your existing auth scheme.