upload files and folders to a site?

[Colin Law]

On 30 August 2014 14:25, Hal Burgiss <hal at burgiss.net> wrote:
>
> On Sat, Aug 30, 2014 at 8:56 AM, <nilesrogoff at gmail.com> wrote:
>>
>> If you are comforatable from a security standpoint setting up passwordless
>> ssh, you can do something like 'echo put blah blah blah | sftp [-P <port>]
>> [<user>@]<host>'
>>
>> Rsync is the easier way to go.
>>
>>
>
> Actually, key based authentication is more secure than passwords. Brute
> forcing or guessing a key is an order of magnitude more difficult than the
> same with any password, unless maybe the password is several hundred random
> characters.

I think 'differently secure' might be a better way of describing it.
It depends what the threat is.  If, for example, someone acquires a
laptop that has the keys setup to allow access into a server then they
may be able to use that to get straight in.  No need to guess
passwords.  For the 'brute force' approach however, as you say, keys
are effectively unbreakable.

Colin