Absolutely check out that link. Always use public key authentication if you have an SSH server on the Internet. It's much more secure.
It can also be convienent. I keep a copy of PuTTY along with all my keys on an encrypted portion of my USB drive. The keys are also protected by a passphrase, the extra encryption is just for my peace of mind. I can SSH into my computers from anywhere on the Internet.
If you do use public key authentication, it's critical that you disable password authentication in your /etc/ssh/sshd_config to have the line:
Code:
PasswordAuthentication no
Just don't do that until after you have made sure your keys work.
