Comments on: Capistrano Auth Trick http://somic.org/2009/10/07/capistrano-auth-trick/ Dmitriy Samovskiy's Blog Wed, 18 Aug 2010 22:05:16 -0500 http://wordpress.org/?v=2.8.4 hourly 1 By: Dmitriy http://somic.org/2009/10/07/capistrano-auth-trick/comment-page-1/#comment-704 Dmitriy Thu, 08 Oct 2009 15:51:19 +0000 http://somic.org/?p=857#comment-704 Fair enough, SSH keys could be better, and SSH agent can come in handy as well. But "dangerous as hell" - that's a strong statement :) What's wrong with usernames and passwords? I am not aware of any critical vulnerabilities in OpenSSH caused by username/password auth. Are you? Would appreciate it if you let me know. Fair enough, SSH keys could be better, and SSH agent can come in handy as well.

But “dangerous as hell” – that’s a strong statement :) What’s wrong with usernames and passwords? I am not aware of any critical vulnerabilities in OpenSSH caused by username/password auth. Are you? Would appreciate it if you let me know.

]]> By: Lee Hambley http://somic.org/2009/10/07/capistrano-auth-trick/comment-page-1/#comment-703 Lee Hambley Thu, 08 Oct 2009 15:19:25 +0000 http://somic.org/?p=857#comment-703 You should be using SSH keys, advice like this is dangerous as hell, is there a good reason for not using SSH keys to manage authentication? You should be using SSH keys, advice like this is dangerous as hell, is there a good reason for not using SSH keys to manage authentication?

]]>