Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Jan 2024 07:43:08 +0100
From:      Tomek CEDRO <tomek@cedro.info>
To:        paulf@quillandmouse.com,  FreeBSD Questions Mailing List <freebsd-questions@freebsd.org>
Subject:   Re: Enabling SSD
Message-ID:  <CAFYkXjkSpeoYftuxR8VPyvwADfsfAwUxxjAcsfmYb4e9JPpVWA@mail.gmail.com>
In-Reply-To: <20240130043205.2japt7ja7j5urm5r@yosemite.mars.lan>
References:  <20240130043205.2japt7ja7j5urm5r@yosemite.mars.lan>

next in thread | previous in thread | raw e-mail | index | archive | help
--00000000000007248506102414be
Content-Type: text/plain; charset="UTF-8"

> PermitRootLogin yes

this is extremely dangerous. have you considered su or sudo?

> PubkeyAuthentication no

this is really easy. try one as an exercise. you can generate public and
private keys pair with a script. then you keep the private key on your own
computer and public key on the remote host. you can protect the key with
password. you can even put the private key on the usb token (i.e. yubikey)
so it's not stored as a file and you carry the key all the times protect it
with a pin and use it for different hosts so you don't have to remember
thousands of passwords :-)

--
CeDeROM, SQ7MHZ, http://www.tomek.cedro.info

--00000000000007248506102414be
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div><div dir=3D"auto">&gt; PermitRootLogin yes</div><div=
 dir=3D"auto"><br></div><div dir=3D"auto">this is extremely dangerous. have=
 you considered su or sudo?</div><div dir=3D"auto"><br></div><div dir=3D"au=
to">&gt; PubkeyAuthentication no</div></div><div dir=3D"auto"><br></div><di=
v dir=3D"auto">this is really easy. try one as an exercise. you can generat=
e public and private keys pair with a script. then you keep the private key=
 on your own computer and public key on the remote host. you can protect th=
e key with password. you can even put the private key on the usb token (i.e=
. yubikey) so it&#39;s not stored as a file and you carry the key all the t=
imes protect it with a pin and use it for different hosts so you don&#39;t =
have to remember thousands of passwords :-)</div><div dir=3D"auto"><br></di=
v><div data-smartmail=3D"gmail_signature">--<br>CeDeROM, SQ7MHZ, <a href=3D=
"http://www.tomek.cedro.info">http://www.tomek.cedro.info</a></div></div>;

--00000000000007248506102414be--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAFYkXjkSpeoYftuxR8VPyvwADfsfAwUxxjAcsfmYb4e9JPpVWA>