OpenSSH running on my server and JuiceSSH on client mobile device. Password authentication is disabled and private key is stored encrypted inside JuiceSSH dedicated memory.
I want to connect to my server from an untrusted network (eg. public Wi-Fi on the bus or in the mall). The network is an open network and insecure, it may be possible that malicious 3rd party eavesdrops the connection and captures the data being sent and received.
In the above situation:
- can the eavesdropper gain access to my server?
- if yes - how would he achieve that and how could I prevent it?
- if no - what mechanism is preventing this sort of attack?
- how would the answers change if I were using passwords instead of keys?