News for hackers. Stuff that matters.

A comment on Short-Lived Certificates at Netflix.

Re:Short-Lived Certificates at Netflix by moulidorai on Wednesday October 25, 2017 @01:47AM (#15547802)
Companies should start using tools like ManageEngine Key Manage Plus https://www.manageengine.com/key-manager/ (or) other similar products for secure ssh key and ssl certificate management. Automation is the only way to avoid security issues.

Disclaimer: *I work for ManageEngine.

[ Parent | on HN ]
Re:Short-Lived Certificates at Netflix by rgooch on Wednesday October 25, 2017 @11:25AM (#15550882)
Symantec has developed an Open Source system for short-term SSH and SSL certificate management with 2FA (VIP and U2F). We encourage people to adopt this to improve their security. Code: https://github.com/Symantec/keymaster Design document: https://docs.google.com/document/d/1AW3UROCJqTc3R4MLJXxmPUNS...
[ Parent | on HN ]