NjU24E48YqdBGnG

4 ms·

1. 1.▲
   by NjU24E48YqdBGnG 4y ago

   Yes, I could. In fact I actually also use the PIV functionality, just not for SSH. The GPG answer seems simpler, at least for my use-case, since it really does just require SSH and GPG (okay, and GPG configured to `enable-ssh-support`). Als
2. 2.▲
   by NjU24E48YqdBGnG 4y ago

   I just store my SSH key in my Yubikey and then I can SSH from any computer that has SSH and GPG installed. Gets rid of the "generate and sign a key that then sits on that computer that might not be fully trusted" step...
3. 3.▲
   by NjU24E48YqdBGnG 4y ago

   We use SSH certificates for host keys at work. That way we can avoid the constant "is this the host key you were expecting?" that everyone just pounds 'y' through. I've used user certificates personally in the pas