sftpgo icon indicating copy to clipboard operation
sftpgo copied to clipboard

Order of authentication methods (pubkey+password)

Open secretfork opened this issue 11 months ago • 0 comments

Is your feature request related to a problem? Please describe.

If authenticating using a pubkey+password it would be nice if one could (optionally) configure pubkey authentication to be executed first. Mostly because this would get rid of brute force hacking attempts which would probably not even try to get past the pubkey authentication step, and thus not encouraging bots to even try. Currently, sftpgo allows clients to execute password authentication before authenticaing with pubkey.

Describe the solution you'd like

Something like "AuthenticationMethods publickey,password" (notice the order) used in sshd_config

Describe alternatives you've considered

No response

What are you using SFTPGo for?

Professional user, 1 person business

Additional context

No response

secretfork avatar Mar 14 '24 21:03 secretfork