Mozilla Guidelines to Secure SSH

Re:Mozilla Guidelines to Secure SSH by markmaglana on Tuesday November 09, 2021 @01:06AM (#29158277)

It doesn't address the Trust On First Use (TOFU) issue.

[ Parent | on HN ]

Re:Mozilla Guidelines to Secure SSH by zdw on Tuesday November 09, 2021 @01:22AM (#29158364)

A SSH Certificate Authority signing host keys handles that, but requires additional setup.

[ Parent | on HN ]

Re:Mozilla Guidelines to Secure SSH by franga2000 on Tuesday November 09, 2021 @03:01AM (#29158961)

A quick and dirty way to do this is by syncing the known hosts file between all your clients. Make it writable by only the IT staff in charge of provisioning new systems and have them add the pubkeys during provisioning.

[ Parent | on HN ]

Re:Mozilla Guidelines to Secure SSH by csdvrx on Tuesday November 09, 2021 @09:31AM (#29162199)

Add SSHP records to your DNS entries, and use DNSSEC or, if you can't, DoH (DNS over HTTPS)

[ Parent | on HN ]