Hacker News new | ask | show | jobs
by apawloski 3005 days ago
How are you managing your SSH keys to make <1HR rotation feasible?
1 comments

With an SSH CA.
Is there one of those you’d recommend?
Check out Hashicorp Vault (https://www.vaultproject.io/docs/secrets/ssh/signed-ssh-cert...) for a general product (has lots of the features of AWS Secrets Manager as well), or Netflix BLESS (https://github.com/Netflix/bless) for a very specific tool for just this.