Proposed guidelines aim to inject badly needed common sense into password hygiene.

Here is the text of the NIST sp800-63b Digital Identity Guidelines.

  • TBi@lemmy.worldEnglish
    0·
    3 days ago

    My company blocked ssh keys in favour of password + 2FA. Honestly I don’t mind the 2FA since we use yubikeys, but wouldn’t ssh key + 2FA be better?

    • jj4211@lemmy.worldEnglish
      0·
      2 days ago

      All well and good when ssh activity is anchored in a human doing interactive stuff, but not as helpful when there’s a lot of headless automation that has to get from point a to point b.

    • JasonDJ@lemmy.zipEnglish
      0·
      2 days ago

      Just store your keys on the yubikey. Problem solved.

      Or use a smart card profile and go that route.