Poll HN: Do you use SSH certificates (not mere public-key authentication)?

Re:Poll HN: Do you use SSH certificates (not mere public-key... by tomaslaureano on Wednesday August 31, 2022 @10:25AM (#32662436)

Would love to know more about this workflow!

[ Parent | on HN ]

Re:Poll HN: Do you use SSH certificates (not mere public-key... by XiS on Wednesday August 31, 2022 @11:34AM (#32663533)

It's pretty much a combination the following:

- https://keepassxc.org/docs/#faq-ssh-agent-how

- https://developers.yubico.com/SSH/Securing_SSH_with_FIDO2.ht...

You could probably also put the SSH key itself as a resident key on the YubiKey. But personally I like the fact the key and 2FA aren't on the same device (and the fact you can only get my key when you know the KeepassXC master password).

[ Parent | on HN ]