comparing SSH key and passphrase auth vs. an SSH key *with* a passphrase ...

[Charles Swiger]

On Sep 15, 2014, at 12:07 PM, John Case <case at SDF.ORG> wrote:
> On Thu, 11 Sep 2014, Charles Swiger wrote:
>> If you want to improve security, however, either 2-factor auth or OPIE / one-time passwords would be better than SSH key+passphrase.
> 
> 
> Ok, thanks - but SSH key+passphrase is still much better than just plain old password, yes ?

Yes, it's better.  However, the default storage that SSH uses for private keys with a passphrase isn't as strong as it could be.

Regards,
-- 
-Chuck