Re: Allowing remote root login seems to be bad. Why?

[j debert <jdebert@xxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joseph Spenner さんは書きました:
| If you're going to permit root login, why not force key
| authentication (prohibit password auth).  Then, your password will
| never be guessed/hacked, nor any passwords on the server for that
| matter.
|
|

Still does not eliminate risks from as yet unknown vulnerabilities, etc.

How about weak keys?

And can _all_ ssh clients use key auth now?

==
- --
jd

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)

iD8DBQFISTYEhpL3F+HeDrIRAjGwAJsERYvFLabKdfQURT251SqXNzdxCgCgsNWH
OKw5h0eLMqu7z399TTYU/mI=
=qSZB
-----END PGP SIGNATURE-----