| |||||||||||||
when you cannot force, encouragewhen you cannot force, encouragePosted Jan 14, 2010 9:29 UTC (Thu) by dgm (subscriber, #49227)Parent article: SSH: passwords or keys?
> So, it would seem that disallowing password authentication for ssh and requiring users to password protect their private keys would go a long way towards eliminating compromises via ssh. There aren't any technological means to force passwords on private keys, but an administrator must either trust their users or disable their access.
When one cannot force the desired behavior, the next best thing is to make it so easy that only the most stubborn will do otherwise deliberately. What's needed is a tool that does just that.
(Log in to post comments)
|
|||||||||||||