Digital Ocean ssh key authentication security risk — password authentication is re-enabled

Posted by Daniel Elebash on Jan 27

Regarding digitalocean.com cloud computing.

PasswordAuthentication is reset to yes in /etc/ssh/sshd_config when using ssh key authentication given the following
scenario:

When creating a new droplet from a snapshot where ssh key authentication “PasswordAuthentication” in
/etc/ssh/sshd_config was previosly set to no, “PasswordAuthentication” is reset to yes.

I am not sure how common this scenario is but for me I often…

Leave a Reply