3 ms·

did you read the article? ssh certificates with revokation are a much more workable solution

• aris_ada 11y ago
  I wrote the article.
• Piskvorrr 11y ago
  There's the up-front cost of setting them up, and perhaps tool support (pubkey/agent auth is widely supported; X.509...not so much).
  • throwaway2048 11y ago
    ssh certificates are not x.509, though they are designed around a PKI.
    • Piskvorrr 11y ago
      Thanks for the correction.