FROM KEY SPRAWL TO SCALABLE CONTROL: RETHINKING SSH ACCESS

Summary from the TLDR InfoSec newsletter

Static SSH keys can present security issues if they are not rotated often enough or shared between teams or with external contractors, and can also add to management overhead. SSH certificates present a more modern alternative in which users present their public key to a centralized CA, which signs a certificate based on it, which can be used for a time limited authentication. This article presents an implementation of SSH certificates using Hashicorp Vault and Boundary.