A better summary.

Posted Jun 12, 2026 7:49 UTC (Fri) by Cyberax (✭ supporter ✭, #52523)
In reply to: A better summary. by anselm
Parent article: Eliminating long-lived credentials with trusted publishing

BTW, and you also can combine both approaches. Nothing stops you from issuing SSH CA certs for token-based keys.