Why not let the administrator decide?
Why not let the administrator decide?
Posted Aug 11, 2026 16:51 UTC (Tue) by mb (subscriber, #50428)In reply to: Why not let the administrator decide? by farnz
Parent article: Changes in shadow-utils password-expiration features
we already know how to do far better - key based authentication (like SSH keys)
These only solve part of the problem. If done properly then they still need a (local) password. Otherwise they are as insecure as storing your password database as passwords.txt on the local disk.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.