News for hackers. Stuff that matters.
Re:Bastion hosts by jpgvm on Thursday November 20, 2014 @03:33PM (#8637981)
Better yet. Store the authorized public keys in LDAP or similar system. (AuthorizedKeysCommand makes this super simple these days).

That way you can rotate them easily if the private keys become compromised.

I recently built a system using this technique and synced the keys to S3, very effective.

There are no comments on this comment yet.