News for hackers. Stuff that matters.

A comment on SSH certificates: the better SSH experience. Parent comment

Re:SSH certificates: the better SSH experience by laserlight on Saturday April 04, 2026 @02:47AM (#47636517)
> Things like deploying dev keys to various production environments, instead of generating/registering them within said environment.

I can see this happening when a developer is authorized to generate, but not to register. So, they just reuse an already-registered one.

[ Parent | on HN ]
Re:SSH certificates: the better SSH experience by tracker1 on Monday April 06, 2026 @01:00PM (#47663581)
In the example, it wasn't even that complex... I have used patterns to register allowed signer keys based on environment variables that an application runs under, initializing at startup... so "register" just meant assigning the correct values for 2-4 environment variables per public signer allowed... and removing the dev signer. (JWT based auth)
[ Parent | on HN ]