News for hackers. Stuff that matters.

A comment on Bizarre and Unusual Uses of DNS. Parent comment

Re:Bizarre and Unusual Uses of DNS by sammax on Sunday February 26, 2023 @06:35AM (#34944765)
I’ve set up an AuthorizedKeysCommand that uses unbound to get the authorized keys for the server via DNSSEC, with the ability to specify keys for whole servers, users on servers or globally for all servers. This is pretty neat for my few private boxes, I wouldn’t advise it for something bigger or enterprise, an ldap or similar seems better for that.
[ Parent | on HN ]
Re:Bizarre and Unusual Uses of DNS by tptacek on Sunday February 26, 2023 @05:51PM (#34950534)
People scaling SSH authorization tend to set up SSH CAs (either directly, or baked into some higher-level management solution). SSH CAs scale down nicely, as well.
[ Parent | on HN ]