Comment by epihelix
2 days ago
> How is password auth weaker than key auth?
Well, it's a heck of a lot weaker in this instance (at least when `PasswordAuthentication no`)
2 days ago
> How is password auth weaker than key auth?
Well, it's a heck of a lot weaker in this instance (at least when `PasswordAuthentication no`)
In this specific instance yes, but it seems like it could have about as easily been a perfect cascade of failures in janky libc routines for checking keys as opposed to janky libc routines checking passwords.