3 ms·
Why not use certificates as your primary authentication for SSH? Facebook has a great blog post on implementing this at scale: https://engineering.fb.com/securi
by cbb330 6y ago
Why not use certificates as your primary authentication for SSH? Facebook has a great blog post on implementing this at scale: https://engineering.fb.com/security/scalable-and-secure-access-with-ssh/ https://engineering.fb.com/security/scalable-and-secure-acce...
- theatrus2 6y agoIf you’re on AWS and have credentials for users there, you can also run bless https://github.com/Netflix/bless https://github.com/Netflix/bless
- tashian 6y agoYes! Shameless plug — we (smallstep.com) offer a service that makes this frictionless at scale and super easy to set up. You'll never want to go back to public keys.