3 ms·
I think we're in full agreement here. My prior comment was about using your existing keys as the CA.
by soraminazuki 5y ago
I think we're in full agreement here. My prior comment was about using your existing keys as the CA.
- ayushnix 5y agoOh, I didn't realize you were talking about not using your SSH keypair as the SSH CA keypair. Well, that's kinda expected. The SSH CA keypair is the single point of failure in this case, which sounds worse than it is but it's okay to have such a thing because of the benefits, so it should be protected and isolated.