3 ms·
That's just the nature of trusting someone else to be your CA. You don't have to do that to use SSH certs.
by pphysch 4y ago
That's just the nature of trusting someone else to be your CA. You don't have to do that to use SSH certs.
- hedora 4y agoAt the minimum, you need to trust yourself to be a CA. That's strictly more attack surface than not having a CA.
- pphysch 4y agoIt's not "strictly" more because you reduce the attack surface of your leaf certs through expiration, etc.
- hedora 4y agoWhat attack does that prevent? If the leaf certs are compromised, then so is the server, and it is already game over.
- pphysch 4y agoIt prevents the attack where thousands of users have thousands of long-forgotten keys lying around, and eventually one of them gets compromised months or years after it was last legitimately used. AKA a huge attack surface that can't reliably be culled, because you are effectively relying on users to be their individual CAs. This particular attack took down my former organization once.