Thoughts on increasing ssh security using a hardware security key

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

I have been using hardware security keys (including YubiKeys and Titan keys) for FIDO2 and TOTP for a while, but not for ssh. At the moment, I harden the ssh config on my servers, lock down access by IP address, and use password-protected certificates for authentication, blocking password-based authentication. So I think that I do at least reasonably well as it is. But I was interested to see if I…

Read on neilzone.co.uk ↗