3 ms·
> Frankly I'd much rather do that then have my server on a non-standard port. Frankly, the problems with key security and management are much worse than are be
by GalacticDomin8r 13y ago
> Frankly I'd much rather do that then have my server on a non-standard port.
Frankly, the problems with key security and management are much worse than are being discussed. Using only keys is fine as long as your keys are secure and you know which is which and control all access and immediately remove any key which needs to be. In a complex environment, this is extremely difficult and more prone to security breaches than password access.
- __david__ 13y agoI don't know. In complex environments that try to use passwords, I've observed that the password spreads until everyone knows it and then nobody can change it because "everyone already knows it and it would be a pain". Keys allow fine grained access and can theoretically be way more secure. On the other hand, the last place I consulted for had their private key for production checked in to the main git repo, unencrypted. :-/
- GalacticDomin8r 13y ago> Keys allow fine grained access and can theoretically be way more secure. This is true but as often is theory and "life" don't agree about the practice. This is exactly my point. If you could enforce a non-blank password on keys then I would change my tune at least a bit.