a thoughtful web.
Good ideas and conversation. No ads, no tracking.   Login or Take a Tour!
comment by omgwtfbbq
omgwtfbbq  ·  4038 days ago  ·  link  ·    ·  parent  ·  post: Why Putting SSH On Another Port is a Good Idea

I agree on the "obscurity" as a complementary layer, I never understood why so many people want to look at it as a bad practice!

Security at its most robust is done in layers.

Also, who the hell wants tons of bots probing port 22?





mknod  ·  4038 days ago  ·  link  ·  

I agree with this. For years people have been fighting with me about this, and I think it's a really dumb argument.

Security through obscurity obviously isn't going to be a best use practice, it's just a layer. SSH is a layer too, file permissions are a layer, SELinux's acl's are a layer. It's layers all the way down!