What is more secure using ssh as tunnel with password or without password

Asked by mohammed farah

  I am using ssh for tunneling one of my service, but i want to know what is more secure using password authentication or using keys to login without password (the service has it's own authentication but not encrypted ?

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Solved by:
mohammed farah
Solved:
Last query:
Last reply:
Revision history for this message
Mathias Uebelacker (muebelacker) said :
#1

Hello,

i prefer ssh with key. Remember: you must copy the public key to server to use ssh with key.

br
Mathias

Revision history for this message
Bhavani Shankar (bhavi) said :
#2

Well... Yes what matthias said is right... I also do prefer SSH tunnel with a key... Reason: Take a look at this article named SSH Host Keys as a protection against Man-In-The-Middle Attacks by Brian Hatch...
http://www.securityfocus.com/infocus/1806
(I am also an ehical hacker doing hacking round for 6yrs....:) )
cheers,
Bhavani Shankar.

Revision history for this message
Bhavani Shankar (bhavi) said :
#3

you must copy the public key to server to use ssh with key......:)

Revision history for this message
mohammed farah (mohmohfarah) said :
#4

Thanks, I did it and it is working fine, The article is also helpful