3 ms·
ssh does support certificate based authentication [1] [1] https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/6/html/deployment_guide/sec-using_o
by advisedwang 11mo ago
ssh does support certificate based authentication [1]
[1] https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/6/html/deployment_guide/sec-using_openssh_certificate_authentication https://docs.redhat.com/en/documentation/red_hat_enterprise_...
- vbezhenar 11mo agoYou can't just use letsencrypt certificates and make it work out of the box. Still insecure.
- jon-wood 11mo agoWorth noting this is similar to but not the same as the type of certificate based authentication used in web browsers. Most notably you can't chain CAs, so there is no root of trust beyond whoever operates the CA you care about telling you the public key out of band. For SSH this is fine, because very rarely is anyone connecting to a random SSH server on the internet without being able to talk to the operators (hi Github, we see you there, being the exception).