4 ms·
For the love of God, please stop using SSH keys. Almost every "company X is hacked" title on HN can be traced to leaked SSH credentials. Use auto-expiring cert
by old-gregg 6y ago
For the love of God, please stop using SSH keys. Almost every "company X is hacked" title on HN can be traced to leaked SSH credentials.
Use auto-expiring certificates that are issued after a proper SSO+2FA flow:
https://gravitational.com/blog/how-to-ssh-properly/ https://gravitational.com/blog/how-to-ssh-properly/
- resfirestar 6y ago> Almost every "company X is hacked" title on HN can be traced to leaked SSH credentials. I don’t think that’s anywhere close to true but I’d be interested if you have reason to believe it is or some examples. Or maybe it’s intentional hyperbole?
- kortilla 6y agoIntentional hyperbole to sling blog spam. That link is to a site the OP claims in profile.
- ikiris 6y agoMost of the time, you're lucky to get people to move off of passwords