Hacker News new | ask | show | jobs
by solatic 747 days ago
Serious question: why doesn't OpenSSH declare, with about a year's notice ahead of time, the intent to cut a new major release that drops support for password-based authentication?
3 comments

There are very legit reasons to use passwords, for example in conjunction with a second factor. Authentication methods can also be chained.
Password authentication is still entirely necessary. I don't want to have to setup keys just to ssh into a VM I just setup, as one very minor example.
By the time it gets into distros' package managers, is it not often that long (or more) anyway?