[malka]

IIRC, even if you enable remote connection, the passwordless login is still only authorized locally.

[mhotchen]

Yeah good point, you're right. The root user is defined as root@localhost, not root@%.

[Fnoord]

Has that always been the case?