3 ms·

Why every SSH user should switch to using SSH Certificates

• linsomniac 6y ago
  I set up SSH signed host keys (as outlined in this article) a couple years ago and it was a game changer. I have around 100-150 hosts I manage, and almost half of them wipe themselves out and rebuild every night. I originally had automation that would pick up all these host keys and publish them, so I wouldn't get host key warnings. It was a finicky process and often would fail. Signed SSH host keys has been a game changer. Don't leave home without it.
  • dbsentry 6y ago
    Yes. Totally agree. Curious to know though why did you not consider using SSHFP records?
    • linsomniac 6y ago
      Might have been an option, but I wasn't aware of it, thanks! It probably would have been harder to set up, for my environment, than the signed host keys, but it's worth considering.