Top all-time · #18102
Just Another Geek
Personal blog · justanothergeek.chdir.orgsecuritysystems
Just Another Geek is a personal blog at justanothergeek.chdir.org about security and systems. Since 2010, 4 different Hacker News readers have linked it 5 times, most often “How To authenticate ssh server through certificates”. It is still writing: the last post was on 2025-02-16, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
The linked post covers improving the security of SSH private key files. The one comment discusses SSH host key distribution and the lack of certificates, a topic the post does not address.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- How To authenticate ssh server through certificates2 people · 2 mentions · first linked 2013-05-24
What Hacker News says?
Of course, this doesn't address what I consider the greatest weakness in using ssh - distribution of host keys. By design, ssh does not make use of certificates. So there is no way for ssh to know upon connecting to a host for the first time whether the public key presented by that host is authentic. After the first connection, ssh caches the keys in ~/.ssh/known_hosts, and will then give you a big warning if the ke…
Comment linking //2011/07/howto-authenticate-ssh-server-through/
on “Improving the security of your SSH private key files”Submitted How To authenticate ssh server through certificates as a story · 10 points
HN discussionSubmitted What if we used Jupyter as a SOAR? as a story · 1 points
HN discussionSubmitted Linux security: Review of one year as a story · 1 points
HN discussionSubmitted Massive reverse address DNS resolver implemented with Node.js as a story · 1 points
HN discussion