"Use key-based auth instead of a password" is common advice for connecting to a server over SSH. But what exactly does key authentication prove, and how does that differ from what a password proves? This post works through the mechanics of what each method is actually demonstrating. Authentication is an act of proof Note: authentication is the process of confirming that whoever just connected really is who they claim to be, based on some kind of evidence. It's often confused wi...