I love ssh certificates for access and indeed we're using this for accessing our production network using a few small pieces of home-grown infrastructure. Howe

I love ssh certificates for access and indeed we're using this for accessing our production network using a few small pieces of home-grown infrastructure. However, there's one big issue nobody is talking about: There is zero support for certificate authentication in any SSH clients for iOS and most people who have network access here also have iOS devices. And even if there were support, just supporting the certificates alone is not enough - there would need to be some automatable way of getting a new certificate into an app as the whole idea of the certificates is that they are very short-lived (days or even hours if possible)