Re:Teleport 4.3: Modern Replacement for OpenSSH
by icedchai on Thursday July 09, 2020 @06:34PM
(#23786036)
Basic SSH does not provide much (any, really) guidance for SSH key management. For a large organization, it can be a very real problem.
At one company I worked for, they handed out an SSH key for the prod admin login to every developer on their first day. Every user actually got the same key. When someone left, they had to rotate the keys. There was no bastion host, but the SSH port was open to static IP addresses for various offices and homes of employees.
At one company I worked for, they handed out an SSH key for the prod admin login to every developer on their first day. Every user actually got the same key. When someone left, they had to rotate the keys. There was no bastion host, but the SSH port was open to static IP addresses for various offices and homes of employees.
(Yes, this was a bad way to do it, of course.)