From owner-freebsd-questions@FreeBSD.ORG Sat Mar 20 17:06:36 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1395A106566B for ; Sat, 20 Mar 2010 17:06:36 +0000 (UTC) (envelope-from norgaard@locolomo.org) Received: from mail.locolomo.org (97.pool85-48-194.static.orange.es [85.48.194.97]) by mx1.freebsd.org (Postfix) with ESMTP id BCFA98FC19 for ; Sat, 20 Mar 2010 17:06:35 +0000 (UTC) Received: from beta.local (ppp-88-217-26-61.dynamic.mnet-online.de [88.217.26.61]) by mail.locolomo.org (Postfix) with ESMTPSA id 3D02D1C0871 for ; Sat, 20 Mar 2010 18:06:34 +0100 (CET) Message-ID: <4BA50098.7080602@locolomo.org> Date: Sat, 20 Mar 2010 18:06:32 +0100 From: Erik Norgaard User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.8) Gecko/20100227 Lightning/1.0b1 Thunderbird/3.0.3 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <201003201318.o2KDIcIt001241@fix.fantomatic.co.uk> <4BA4EA8C.3090702@locolomo.org> <20100320121417.67724938@scorpio.seibercom.net> In-Reply-To: <20100320121417.67724938@scorpio.seibercom.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: securing sshd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Mar 2010 17:06:36 -0000 On 20/03/10 17:14, Jerry wrote: > Seriously, disabling password log-ins and using key authentication is > extremely secure. Do make sure that you password protect your keys > however. In any event, if you laptop or whatever is stolen, you have > more than just one problem to contend with anyway. I don't doubt that it is much harder to brute force a key than a password. I simply say that it is not always practical. Anyone stealing or finding your usb or laptop will likely not be too interested in your data. But, now you have to carry the key and protect it. If you travel a lot, and travel light, you bring just a usb stick which is easily lost, and being without access for months is not fun. BR, Erik -- Erik Nørgaard Ph: +34.666334818/+34.915211157 http://www.locolomo.org