On a server I control, I have disabled password logins (public key only), but still need to enter my password to access sudo. This is becoming cumbersome, as I use a long, automatically generated password. I find myself frequently having to copy/paste the password.
I gather that it's a Bad Idea to disable password checking for sudo (as it opens you to the threat of any script you run quietly sudoing in the background).
Would it therefore be reasonable to use a short, fairly weak password?
This particular system runs various (internet-accessible) web services, and can only be SSH'ed to through a gateway server (which is itself internet accessible).