On 5/6/11, Jochen Schulz <ml@well-adjusted.de> wrote: > You can authenticate to an OpenSSH server using a password, or using a > keyfile. On the client side, simply run 'ssh-keygen' to create a > keypair. So the attacker needs to guess my private key instead of my password. How does that make his life more difficult, assuming my password was very strong?