3 ms·
It's a change in mindset to treat SSH keys as unique, non-duplicatable physical objects, but it's very comforting to be able to reason precisely about the where
by sowbug 8y ago
It's a change in mindset to treat SSH keys as unique, non-duplicatable physical objects, but it's very comforting to be able to reason precisely about the whereabouts of a given key.
It does mean you have to get better at keeping your public key lists up to date, so that revoking a key doesn't need a bunch of manual steps. But that's something Ansible/Chef/Puppet are good at.
- yjftsjthsd-h 8y agoAlso worth looking at using a SSH cert-authority, if this is a usecase you're optimizing for.
- linkregister 8y agoUnfortunately, Github among other providers are still in the dark ages and don't recognize ssh certificates. You have to install each key as it's issued.