Lot of articles recommend deactivating ssh for root user with
PermitRootLogin no in
/etc/ssh/sshd_config. There is also a lot of questions on serverfault about implementing root ssh deactivation.
But what is motivation for that?
It makes the attacker to guess the user name in addition. But shouldn't the cryptographic strength of public-private keys and RSA encryption be enough?
I am asking not just out of curiosity, but because using non-root user requires additional trade-offs in ansible usage:
pipelining (compatibility) or