Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 42391

A free and open implementation of the SSH communication security tools.

1 vote

changing defaults when generating new SSH server keys

Run this (as root) instead: #!/bin/sh # clean up old keys or complain you're not root cd /etc/ssh && rm ssh_host_*key* || echo "Run this as root!" >&2 && exit 2 # generate; see https://stribika.g …
Adam Katz's user avatar
  • 12.1k
4 votes
Accepted

Consequences of .ssh/authorized_keys being world-readable

Debian had to create the openssh-blacklist package as a short-term solution to ensure the weak keys could be weeded out. …
Adam Katz's user avatar
  • 12.1k
1 vote

Cannot use "ecdsa" and "rsa" in parallel when using SFTP

SSH (ssh and other programs that run it, such as scp and sftp) stores its keys in ~/.ssh/known_hosts by default. It identifies hosts by their keys. In this case, you presumably have one of those keys …
Adam Katz's user avatar
  • 12.1k
300 votes
Accepted

What are ssh-keygen best practices?

The OpenSSH defaults are safe to trust. … default ("first-preference") in OpenSSH 8.5 (2021-03-03). …
Adam Katz's user avatar
  • 12.1k
4 votes
Accepted

Best practices for securing SSH access? Is certificate-based VPN server a good solution?

OpenSSH is rather secure out of the box. The risk of suffering exploits, especially if you regularly update it, is quite low. I consider it more secure than even the best VPN servers. … I believe OpenSSH also supports certificates, but I suggest ED25519 keys instead. For a higher level of security, you can also set up 2FA. …
Adam Katz's user avatar
  • 12.1k