Re: add 2FA to ssh

[Nicholas Geovanis <nickgeovanis@gmail.com>]

On Thu, Aug 13, 2020, 6:47 AM Henning Follmann <hfollmann@itcfollmann.com> wrote:

On Thu, Aug 13, 2020 at 01:37:39PM +0200, Pòl Hallen wrote:
> Hi folks :)

>
> what it better with 2FA: at ssh login request first 2FA authentication next
> ssh password or viceversa?
>
> thanks!
>
> Pol

sorry to say, but 2FA is again one of the hype things. Why do you need 2FA
for ssh. I mean a really good reason.
Maintain a good keychain and you wont need 2FA.

The usual reason is an out-of-band or hardware-based one-time pad. The additional password is for that session only.

-H

--
Henning Follmann           | hfollmann@itcfollmann.com