4 ms·
It does provide host key rotation in OpenSSH 6.8+: http://blog.djm.net.au/2015/02/key-rotation-in-openssh-68.html http://blog.djm.net.au/2015/02/key-rotation-in
by TimWolla 10y ago
It does provide host key rotation in OpenSSH 6.8+: http://blog.djm.net.au/2015/02/key-rotation-in-openssh-68.html http://blog.djm.net.au/2015/02/key-rotation-in-openssh-68.ht...
- jvehent 10y agoThis technique assumes the operator is OK with taking a few weeks for all users to register the new host key. In the event of a leak, revocation of the leaked key must be immediate. That's why we have CRLs (and OneCRL) and OCSP.