News for hackers. Stuff that matters.
Re:Infrastructure Security Without Slowing Down Developers by jamieweb on Thursday May 07, 2020 @03:41PM (#23107293)
My own solution to this is to store the server key fingerprints in a public Git repository, which can then be pulled from on all devices that need to be able to connect.

This works nicely for my own personal setup with a few servers. It may be possible to scale this to a larger environment with multiple users too.

Then main benefit is that whenever a server is rebuilt (which can be quite regularly when using infra-as-code/infra automation), I don't have to go and manually update every single client that needs to be able to connect.

https://www.jamieweb.net/blog/managing-your-ssh-known_hosts-...

There are no comments on this comment yet.