Conversation started Jul 14, 2011 at 19:47.
The Evil Phoenix
The Evil Phoenix
Jul 14, 2011 19:47
@ScottPack no problem. Assume its my development system. This system sits at one location behind a NAT'd router. This system has access to all my servers via SSH keys with a bitstrength of 4096. These keys are subsequently secured with very secure passcodes, and thsoe keys do not share passcodes.
should i allow password auth so i dont need to carry a USB stick with my keys on it?
or should i just keep my keys with me
Scott Pack
Scott Pack
How restricted is ssh access to the system? Wide open to the world, locked down to a small set of addresses, etc?
The Evil Phoenix
The Evil Phoenix
only one user account: mine
that user account has sudo access
unfiltered, facing the entire world on a non-standard port (not 22 or 2222, which are common SSH ports)
system is behind a NAT'd router, but forwarding of the ports allows the SSH port to be world-facing
every other port is secured to inside the NAT'd network (LAN)
 
Conversation ended Jul 14, 2011 at 19:50.