Networking-Protocol/SSH

[giscus[bot]]

Networking-Protocol/SSH

SSH (Secure Shell) is a network protocol that enables secure remote server management through encrypted communications, supporting robust authentication methods like public-key cryptography over traditional passwords. It allows multiplexing a single connection into multiple channels for various data transfers including command execution and port forwarding.

https://notes.yxy.ninja/Networking-Protocol/SSH

[Yuheng3107]

Second, we may have multiple users accessing the same remote server account. Using password means all users share the same password, on the other hand, with public-key, each user has his own private key to access the remote server. When we want to remove a user’s access, we just need to remove his public key from the remote server.

is this true? can't you have multiple users that have diff passwords? I think the main benefit is avoid brute force attacks no?

[xy-241]

Second point is still valid.

For example, we can let different users share the same admin account by giving each person their own private key instead of sharing one password. Each user’s public key is added to the server’s authorized_keys file, so everyone can log in individually while still using the same account, and each login can be traced back to the specific user based on the key used.

When someone leaves, we can simply remove their public key from the file to revoke access. We don't need to reset passwords or change account settings.