Garrett: We need better support for SSH host certificates

Posted Mar 27, 2023 7:41 UTC (Mon) by anselm (subscriber, #2796)
In reply to: Garrett: We need better support for SSH host certificates by NYKevin
Parent article: Garrett: We need better support for SSH host certificates

I'd say in a corporate environment the solution is to use SSH host certificates. In that case, the only thing you need to deploy to everyone's workstations is a known_hosts file containing the public key of your (SSH) CA, which is much less of a maintenance nightmare.