3 ms·
Doesn't that have all the problems of password auth, but with one extra step, with it's own failure modes, in between?
by ori_b 11y ago
Doesn't that have all the problems of password auth, but with one extra step, with it's own failure modes, in between?
- semi-extrinsic 11y agoI don't think so. A single server sitting behind an advanced firewall/IDS/IPS system and managed by competent IT staff is a much harder target than a multitude of servers I manage myself. Also note that it's not really an extra step, you put in a ProxyCommand in your .ssh/config file.