Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Mar 2005 09:13:18 +0100 (MET)
From:      Jan Christian Meyer <janchris@stud.ntnu.no>
To:        Stevan Tiefert <stevan@rot-1.de>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: sshd
Message-ID:  <Pine.GSO.4.58.0503020900500.13458@panter.stud.ntnu.no>
In-Reply-To: <20050302085135.B23556@mail.rot-1.de>
References:  <20050302075507.P23359@mail.rot-1.de> <20050302074659.GA22958@mccme.ru> <20050302085135.B23556@mail.rot-1.de>

next in thread | previous in thread | raw e-mail | index | archive | help
> [...] I can not close myself out with a firewall. I need the
> access to my system over the internet. Am I right that in this case, only
> a good password is protecting me?

If you have a way of transporting a private key file to wherever you need
to log in from (removable media, one last password login, whatever is
secure enough for your satisfaction), you can use public-key cryptography
and disable password based logins altogether.

Take a look at the man pages of ssh-agent, ssh-add, ssh-keygen, and
google around a bit - it is not too hard to set up.

Cheers,
 -Jan Christian



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.58.0503020900500.13458>