Peter Fraser wrote: > > I was very surprised, that when I was installing > a 3.9 system, that you can use an empty root password > > I accidentally entered a 'return' when it asked for the > root password, so I entered a 'return" again when > I was asked to repeat the password, thinking that > a empty password would be denied, and I would be asked > again.
The folks at OpenBSD understand security. A password is only one way of securing root access. (I'd guess it to be one of the poorer methods available) Assuming that root is secured, physically, I suspect that a root password is actually more of a security threat (what else has that password?) If the password is blank, you know it's blank, and you take appropriate measures.

