Someone told me to disable SSH login with root for security reasons. Might I ask, why is this necessary, exactly? Wouldn't setting a very long (20+ chars long), full-printable-ASCII range, random password be as safe? That would take billions of years to brute force using supercomputers.
closed as not constructive by Ye Lin Aung, TFM, wizlog, Mokubai♦, Journeyman Geek♦ Mar 3 '13 at 14:34
As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.
It is always good practice to disable root access to a publicly accessible server. Use SSH keys instead as the only way to access your server via root. Root should only be used in an emergency anyway.
You never know if in the future an exploit may be found for the login of your server. My friend's server was hacked as he had root access via the web and his Linux system had a security flaw if a certain character was entered as the password.
Rather than making a better door lock, don't give them a door.