[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20020216205052.A2488@openwall.com>
Date: Sat, 16 Feb 2002 20:50:52 +0300
From: Solar Designer <solar@...nwall.com>
To: owl-users@...ts.openwall.com
Subject: Re: OpenSSH authorized keys
On Sat, Feb 16, 2002 at 07:28:00AM -0800, shiftee wrote:
Hi,
> Considering Owl's primary focus is security, I was just wondering if you had
> considered disabling the 'PasswordAuthentication' option in OpenSSH (to
> prevent tunnelling of clear text passwords), and instead using authorized
> keys to increase security just that little bit more... ;-)
This isn't such an obvious choice even if your primary focus is
security. Which authentication scheme is more secure depends on the
particular scenario.
The tunnelling of cleartext passwords is just _one_ of concerns with
one of these authentication schemes. There're others, including some
that are specific to the public key based authentication schemes.
--
/sd
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
