Public keys are not enough for SSH security

If your organization uses SSH public keys, it’s entirely possible you have already mislaid one. There is a file sitting in a backup or on a former employee’s computer which grants the holder access to your infrastructure. If you share SSH keys between employees it’s likely only a few keys are enough to give an attacker access to your entire system. If you don’t share them, it’s likely your team ha

[tmatsuu]

確かにauthorized_keysベースのrevoke処理は大変。Cloudflare Accessは人数が増えるとそれなりの価格になるのでオープンソースで同様のことを実現できるかな

[sirataki256]

“mislaid ”

[ota-5maCEN_bay]

英語なのであとでゆっくりよむ