News for hackers. Stuff that matters.

A comment on Poll HN: Do you use SSH certificates (not mere public-key authentication)?. Parent comment

Re:Poll HN: Do you use SSH certificates (not mere public-key... by candiddevmike on Wednesday August 31, 2022 @11:33AM (#32663525)
This method puts a lot of reliance on DNSSEC working and trusting that it is preventing spoofing. I personally wouldn't rely on this in production, there are too many stories about DNSSEC cutovers rendering the domain unresolvable for hours+. Imagine not being able to get to your servers too...!
[ Parent | on HN ]
Re:Poll HN: Do you use SSH certificates (not mere public-key... by dotwaffle on Thursday September 01, 2022 @01:53AM (#32672513)
My DNS zones are not hosted on those servers, Google Cloud DNS does the dnssec signing, and there is a breakglass key installed on there too that when used automatically sends alerts out.
[ Parent | on HN ]