[utnick]

I see port knocking as protection against an 0day sshd exploit instead of protection against brute forcing.

The article didn't really mention that angle.