From owner-freebsd-questions@FreeBSD.ORG Wed Oct 25 02:54:11 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4381A16A40F for ; Wed, 25 Oct 2006 02:54:11 +0000 (UTC) (envelope-from atom.powers@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.186]) by mx1.FreeBSD.org (Postfix) with ESMTP id EB1B843D76 for ; Wed, 25 Oct 2006 02:54:01 +0000 (GMT) (envelope-from atom.powers@gmail.com) Received: by nf-out-0910.google.com with SMTP id p77so436621nfc for ; Tue, 24 Oct 2006 19:54:00 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=bDLqSq8736WJUPlnKrJR3+DV34KdZ8zyus9KX3nHTjKcaCcwCUUuWEhWqL8pwa1trd9gevA/v6+r8jj8BmJcCILssBx/1SR3OcxTIUOxmYw3e6vGEYBe4i4y64QUoNmfv6u4Hvl3aw1L6tRhW6HNXUS4bYO7O3a1bQC2hLaEG6Q= Received: by 10.49.8.1 with SMTP id l1mr2363190nfi; Tue, 24 Oct 2006 19:54:00 -0700 (PDT) Received: by 10.49.63.18 with HTTP; Tue, 24 Oct 2006 19:54:00 -0700 (PDT) Message-ID: Date: Tue, 24 Oct 2006 19:54:00 -0700 From: "Atom Powers" To: "Jeff MacDonald" In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: Cc: FreeBSD Questions Subject: Re: a simple questions about sshd and PasswordAuthentication X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Oct 2006 02:54:11 -0000 On 10/24/06, Jeff MacDonald wrote: > Is there anything inherintaly dangerous or wrong about enabling > PasswordAuthentication in sshd_config ? > > I understand how public keys are better and everything else. And I do > use them. I'm just curious. There are many arguments for and against, but /inherintaly/ they are the same. You are comparing your secret to the secret stored on the server. Keys just tend to be much longer secrets, and are also more difficult to change. -- -- Perfection is just a word I use occasionally with mustard. --Atom Powers--