4 ms·
I might not disagree with you there. However, for all its warts, x509 due to hardware implementations, seems a great deal more secure than sitting on the FS SS
by OrvalWintermute 4y ago
I might not disagree with you there.
However, for all its warts, x509 due to hardware implementations, seems a great deal more secure than sitting on the FS SSH host certificates.
- fmajid 4y agoOpenSSH supports FIDO keys since 8.2p1 and has supported smart cards via GPG longer.
- Reitet00 4y agoYeah. Actually ssh agent speaks PKCS#11 (both client and server) so it's possible to interface with the hardware token quite easily. I'm using that to store my client key in TPM for example.