Re: site-to-site VPN with credential prompts?
On Wed, 2025-03-26 at 04:55 +0800, jeremy ardley wrote:
> Out of the box debian has passwords enabled and certificates allowed
> but not mandatory.
> I can guarantee at least 90% of all debian installations do not have
> the defaults changed (let alone any of the other flavours of linux).
Obviously nobody is suggesting that people run an insecure SSH setup.
You should always use keys with SSH, but especially when it’s publicly
listening.
> This is the precise reason I get dozens of attempts a minute on my
> firewall port 22.
FWIW: at that rate it takes millions of years to guess an even halfway
semi-secure 8-character password, let alone the really secure longer
one you _should_ be using.
(But almost all of those attempts only try a small number of very
insecure and/or “default” user/password combinations anyway.)
--
Jan Claeys
(please don't CC me when replying to the list)
Reply to: