passwordless ssh from laptop

[Chris Green]

On Tue, Dec 27, 2016 at 09:15:37AM +1100, Karl Auer wrote:
> On Mon, 2016-12-26 at 22:05 +0000, Colin Watson wrote:
> > On Tue, Dec 27, 2016 at 08:50:02AM +1100, Karl Auer wrote:
> > > suggests that it is not in the man page for my Ubuntu install
> > You're probably looking in the wrong manual page.
> 
> Gaah! Of COURSE I was :-)
> 
> I'm less interested in using MFA for my local logins, but very
> interested for remote logins. I see little point in super-strong local
> protections, because if they have the hardware they have what's on it.
> But I do want to strongly protect against remote compromise.
> 
My strategy for making remote logins as secure as possible (without
being unusable) is as follows:-

    My home desktop machine is behind a firewall which only allows ssh
    connections from two specific IP addresses.

    The two specific IP addresses allowed are on two different hosting
    services that I use which allow ssh access.

Thus, to login from the outside world I have first to make an ssh
connection to one of my two hosting accounts and then another ssh
connection from there to my home machine.

-- 
Chris Green