Re:Show HN: ssh-tpm-agent – SSH agent for TPMs
by Foxboron on Sunday July 30, 2023 @08:24AM
(#36930459)
Apparently you can use a ssh-agent for HostKeys, and by extension ssh-keysign.
So I think this should be trivial to implement actually.
It might be cool to add some attestation feature so you can verify the boot of the machine before releasing the host keys. Might be practical in scenarios where you are SSHing into an initrd or a sensitive remote host.
So I think this should be trivial to implement actually.
It might be cool to add some attestation feature so you can verify the boot of the machine before releasing the host keys. Might be practical in scenarios where you are SSHing into an initrd or a sensitive remote host.