2 ms·
> consider that long-lived SSH credentials are an anti-pattern With due respect: have you considered the myriad systems where you need to upload your SSH key
by chx 8y ago
> consider that long-lived SSH credentials are an anti-pattern
With due respect: have you considered the myriad systems where you need to upload your SSH key to an UI? If my key is short term then I need to do that all the time. I can't set up an SSH CA on github for example.
- alxlaz 8y agoThe fact that GitHub does it, too, doesn't make it any less of an anti-pattern.
- kalalala024 8y agohttp://www.prfree.org/news-watch-ufc-227-live-fight-569216.html http://www.prfree.org/news-watch-ufc-227-live-fight-569216.h... https://www.youtube.com/watch?v=MoNMIkUpXBw https://www.youtube.com/watch?v=MoNMIkUpXBw
- laumars 8y agoGitHub has APIs for automation (eg via Terraform). Granted not ever web-based service does, but if you were sufficiently determined to use SSH CA then I'm sure you'd find a way (or an alternative service that did support your workflow).
- lvh 8y agoYes, we mentioned GitHub repeaatedly in these threads.