Comment Re:Wat (Score 1) 47
Haven't we all moved to Ed25519 years ago, though?
On my servers, I require three separate ssh keys to log in: AuthenticationMethods publickey,publickey,publickey. Logging in with passwords is not permitted over ssh, but that's not a big deal since any account with a password is blocked from logging in via ssh. If the account has a password, it is intended for logging in at the console only. They also permit S/KEY from the console. Also for the RSA key, at least 4096 bits is required: RequiredRSAsize 4096