News for hackers. Stuff that matters.
Re:OpenSSH introduces options to penalize undesirable behavior by hotdogs on Friday June 07, 2024 @02:41PM (#40611592)
The certificates have a validity window that sshd also checks. So the CA can sign a certificate for a short window (hours), until the user has to request a new one.
Re:OpenSSH introduces options to penalize undesirable behavior by chgs on Friday June 07, 2024 @04:18PM (#40612552)
One department in my cops y does this - you authenticate once with your standard company wide oidc integration (which has instant JML), and you get a key for 20 hours (enough for even the longest shift but not enough that you don’t need to reauth the next day).