sftpgo
sftpgo copied to clipboard
Order of authentication methods (pubkey+password)
Is your feature request related to a problem? Please describe.
If authenticating using a pubkey+password it would be nice if one could (optionally) configure pubkey authentication to be executed first. Mostly because this would get rid of brute force hacking attempts which would probably not even try to get past the pubkey authentication step, and thus not encouraging bots to even try. Currently, sftpgo allows clients to execute password authentication before authenticaing with pubkey.
Describe the solution you'd like
Something like "AuthenticationMethods publickey,password" (notice the order) used in sshd_config
Describe alternatives you've considered
No response
What are you using SFTPGo for?
Professional user, 1 person business
Additional context
No response