The doc re. PasswordAuthentication is wrong, changing it only in /etc/ssh/sshd_config is not sufficient, because /etc/ssh/sshd_config.d/50-redhat.conf also contains a PasswordAuthentication which needs to be changed as well (because it defaults to yes).
PS: Is this default really a good idea?! Has it already been considered, discussed and rejected to change this default in a future Fedora version? I stumbled upon this while fixing a box that kept getting automated root login accounts every 5 seconds...
The doc re. PasswordAuthentication is wrong, changing it only in /etc/ssh/sshd_config is not sufficient, because /etc/ssh/sshd_config.d/50-redhat.conf also contains a PasswordAuthentication which needs to be changed as well (because it defaults to yes).
PS: Is this default really a good idea?! Has it already been considered, discussed and rejected to change this default in a future Fedora version? I stumbled upon this while fixing a box that kept getting automated root login accounts every 5 seconds...