Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The best practice is not to allow passwords for root login.

My sshd is configured to not allow passwords logins at all: it's U2F/Yubikey only.



I somewhat like smartcards more. Takes use of the slot, not wasting rare USB ports on notebooks. I don't why there are so few USB ports, but that's another discussion.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: