Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
throwaway2048
on Feb 8, 2016
|
parent
|
context
|
favorite
| on:
SSH: Best practices
did you read the article? ssh certificates with revokation are a much more workable solution
aris_ada
on Feb 8, 2016
|
next
[–]
I wrote the article.
Piskvorrr
on Feb 9, 2016
|
prev
[–]
There's the up-front cost of setting them up, and perhaps tool support (pubkey/agent auth is widely supported; X.509...not so much).
throwaway2048
on Feb 9, 2016
|
parent
[–]
ssh certificates are not x.509, though they are designed around a PKI.
Piskvorrr
on Feb 10, 2016
|
root
|
parent
[–]
Thanks for the correction.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
