Post from 2026-03-26 11:59:34
@
cynicalsecurity
@
jpmens
My former company still uses SSH certs. From top of my head:
- auditable root access without su/sudo
- expiration (no left over access)
- user restrictions bound to certs (instead of server config)
+ human user priv keys were HW bound
https://github.com/silentsignal/zsca
permalink
|
main