Hey guys, has anyone ever set up 2FA for either RDP or SSH? working on getting my server to be safe to be globally exposed, its been local-only since i started infosec stuff. 2FA for RDP seems to be a necessity. (cc @NerdPyle you know windows server things right?)
-
...and then either using google's openauth implementation + public key for ssh auth, or making users buy a yubikey and do yubikey + public key for ssh auth. Prolly overkill, but considering recent events I'm going to be going overboard re: opsec for a while.
Yubikeys are flexible enough to do several of these schemes. E.g. with my idea you can put the SSH key on the yubikey, or use it for TOTP, or for U2F, or their own OTP protocol.