Why SSH Key Management Is Broken and How Certificates Fix It
7.1 relevance
Score Breakdown
technical depth 8
novelty 6
actionability 9
community 3
strategic 6
personal 8
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
SSH certificates vs keys; deep infrastructure security with immediate applicability.
Summary
SSH certificate-based authentication, available in OpenSSH since version 5.4 (2010), solves scaling issues by using a Certificate Authority (CA) model. Deploy separate user and host CAs to sign keys with expirations (e.g., ssh-keygen -s host_ca -h -V +52w), then configure servers with HostCertificate and clients with @cert-authority in known_hosts to eliminate manual key distribution and host fingerprint prompts.