News for hackers. Stuff that matters.

A comment on We need better support for SSH host certificates. Parent comment

Re:We need better support for SSH host certificates by michaelt on Monday March 27, 2023 @04:47AM (#35324361)
In general for systems like this, you can open the browser link from a different host.

For example, if I've SSHed from my laptop to Host A to Host B to Host C then need to authenticate a CLI program I'm running on Host C, the program can show a link in the terminal which I can open on my laptop.

[ Parent | on HN ]
Re:We need better support for SSH host certificates by gpderetta on Monday March 27, 2023 @07:59AM (#35325530)
Having to interact with the browser every time I need to ssh to a machine would be extremely painful.

If key forwarding works, that might be workable.

I'm extremely wary of non-standard ssh login processes as they tend to break basic scripting and tooling.

[ Parent | on HN ]
Re:We need better support for SSH host certificates by michaelt on Monday March 27, 2023 @12:11PM (#35328476)
These tools usually cache your identity, so you might only need to go through a browser once a day.
[ Parent | on HN ]