> you’re doing SSH wrong I understand the theoretical superiority to keys, but d... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

charles_f on March 24, 2022 | parent | context | favorite | on: If you’re not using SSH certificates you’re doing ...

> you’re doing SSH wrong

I understand the theoretical superiority to keys, but do we have some data per practically how many times key security actually failed someone?

haarts on March 24, 2022 [–]

I would very much like to read about that too.

Setting some sane security parameters for your SSH setup looks like a less jarring/drastic approach into securing SSH further[1]:

- Use keys.

- Allowing only strong cyphers.

- Remove weak primes.

[1]: https://disknotifier.com/blog/simple-ssh-security/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact