Date: Sat, 16 Feb 2002 20:50:52 +0300 From: Solar Designer <solar@...nwall.com> To: owl-users@...ts.openwall.com Subject: Re: OpenSSH authorized keys On Sat, Feb 16, 2002 at 07:28:00AM -0800, shiftee wrote: Hi, > Considering Owl's primary focus is security, I was just wondering if you had > considered disabling the 'PasswordAuthentication' option in OpenSSH (to > prevent tunnelling of clear text passwords), and instead using authorized > keys to increase security just that little bit more... ;-) This isn't such an obvious choice even if your primary focus is security. Which authentication scheme is more secure depends on the particular scenario. The tunnelling of cleartext passwords is just _one_ of concerns with one of these authentication schemes. There're others, including some that are specific to the public key based authentication schemes. -- /sd
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.