minus-squareforbiddenlake@lemmy.worldtoLinux@lemmy.ml•Why disable ssh login with root on a server if I only log in with keys, not password?linkfedilinkEnglisharrow-up0·7 days agoThe client has the private key, the server has the corresponding public key in its authorized keys file. The server is vulnerable to the private key getting stolen from the client. linkfedilink
minus-squareforbiddenlake@lemmy.worldtoSelfhosted@lemmy.world•TIL - CaddylinkfedilinkEnglisharrow-up0·10 days agoUse the DNS challenge instead? You’ll need a DNS provider with an API though linkfedilink
The client has the private key, the server has the corresponding public key in its authorized keys file.
The server is vulnerable to the private key getting stolen from the client.