News for hackers. Stuff that matters.

A comment on SSH Emergency Access. Parent comment

Re:SSH Emergency Access by dsr_ on Saturday July 04, 2020 @01:14PM (#23733569)
As opposed to having a few bastion-hosts, and requiring people to log in there in order to then ssh on to their final destinations -- in that case, revoking their keys is as simple as wiping their accounts on the bastion hosts.
[ Parent | on HN ]
Re:SSH Emergency Access by jon-wood on Monday July 06, 2020 @08:28AM (#23747158)
Even with a few bastion hosts things get hard to track quickly as you end up with multiple clusters (dev/staging/UAT/production), and potentially multiple production clusters in different regions.
[ Parent | on HN ]