3 ms·
in a safe at the bottom of the ocean? who cares, put an intermediate signer in a cloud somewhere that requires 2FA with multiple valid tokens, and everything is
by ikiris 4y ago
in a safe at the bottom of the ocean? who cares, put an intermediate signer in a cloud somewhere that requires 2FA with multiple valid tokens, and everything is now much more secure and not tied to your specific key.
- chasil 4y agoI think it's more nuanced. SMP and hyperthreading are risky for security. Closed firmware is also concerning. Older systems without these architectural features are more difficult to abuse. I would find one of these if I needed a secure SSH CA for myself, and use OpenBSD. I probably couldn't get away with that in a larger organization.