[PLUG] Configuring /etc/ssh/sshd_config

Russell Senior russell at personaltelco.net
Sat Feb 7 23:18:50 UTC 2015


>>>>> "Rich" == Rich Shepard <rshepard at appl-ecosys.com> writes:

Rich> [...] Password works, but that's sent clear text so [...]

Uh, no. Your password is still encrypted, not plain text.  The reason
people prefer keys is that passwords (particularly bad ones) can be
brute-forced.  If you *can* use passwords, you are just as vulnerable.
If you allow passwords, pick good ones, and brute forcing will take a
long, long time.


-- 
Russell Senior, President
russell at personaltelco.net



More information about the PLUG mailing list