Comment by yjftsjthsd-h
2 years ago
No, it's assuming a device running a ssh daemon with something mounted rw or user-modifiable[0] that can hold an authorized_keys file. A NetBSD embedded board that configures sshd with `AuthorizedKeysFile /sdcard/config/authorized_keys` would be fine, for instance.
[0] For example, you could let the user write their key to an SD card and then mount it ro on the device.
So what do you do when the device has no long-term storage like an SD card?
Such a device is then simply not suitable for situations where the issues with SSH password authentication become relevant.
What kind of device runs sshd but has no persistent storage?