The default OpenSSH key encryption is worse than plaintext

Re:The default OpenSSH key encryption is worse than plaintext by tptacek on Friday August 03, 2018 @04:22PM (#17683307)

We like Y4's just fine. For the very limited set of machines we maintain that we ever need to SSH into, we use Y4 SSH keys. But we don't promote them to clients; we're working on rolling out short-lived SSH credentials with them.

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by Spooky23 on Friday August 03, 2018 @05:14PM (#17683667)

Is there a good guide or tool out there for implementing/managing SSH CAs?

I don’t really play in this space, but I have some business partners who were struggling with it.

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by lvh on Friday August 03, 2018 @09:09PM (#17684832)

I think the easiest way to get started is to deploy Teleport or BLESS.

[ Parent | on HN ]