→
SSH Hardening: the 2017 Trilogy Reread in 2026
In 2017 I answered a naive SSH hardening article in three comments: root, port, keys. Nine years later the principles hold, the context changed: bastions, native Windows, the client supply chain and the physical threat no config covers.