2 ms·
OpenSSH now supports certified/signed keys for users and hosts
- hannibalhorn 17y agoGood to have the option, I know I'd prefer it to distributing and maintaining a known_hosts file to a whole network. That said, I really prefer the idea of using DNSSEC with SSHFP records to CA infrastructure, but that's obviously not as feasible with VPSs / EC2 and the like. Revocation is certainly more straightforward.