Is it risky to open the SSH service on a web server (even with a strong password or with RSA keys) ? What are good practises to connect to a web server for maintenance ?
Thank you !
3
-
It's very common in *nix environments to open ssh on servers. Cloud services rely on it (how else could you manage hosted servers?)– Chris F CarrollSep 5, 2014 at 10:49
-
2This is my favourite: security.stackexchange.com/questions/17931/… - SSH key plus a 2FA token (you can use google authenticator on Android/iOS or windows Authenticator on windows phones... or get hardware tokens).– HocusPocusSep 5, 2014 at 10:53
-
Do you have a corporate VPN? Is your web server on it?– lzamSep 5, 2014 at 12:22
Add a comment
|