« first day (4948 days earlier)   

1:03 AM
@LandonZeKepitelOfGreytBritn a script? It's not that hard
remember SSH keys on the device are the PUBLIC key
 
@Mgetz yhea you're right. Didn't give it enough thought. You'd simply need a script which replaces every public key on every machine one after the other, reboot and carry on with your life
 
1:44 AM
@Mgetz I realize that having ssh keys with passphrases is kind of a chicken-egg issue
You very often don't want to type your passphrase every single time. It is even worse if you have to type your passphrase in your scripts as it will appear in plain text. In order to alleviate this issue one could rely on ssh forwarding agents. However, if someone uses the system on which the ssh agent is running he can just connect even if he doesn't know the passphrase
I initially thought about killing the ssh agent after every usage. But then you're back at your starting point, ie having to type your passphrase every time as you have to restart your ssh agent before every usage
ssh management is harder than I thought
 
 
2 hours later…
3:37 AM
@LandonZeKepitelOfGreytBritn Probably remembear.com
@LandonZeKepitelOfGreytBritn okta is the real answer, sometimes yubikey
OKTA
Employees
5,908
so like each of them remembers about 100 keys or what?
 
3:57 AM
@Mikhail clever idea those people got.
Had been thinking about something similar for quite a while
There must be a way to come up with an even better product...
 
Make a service like Okta but then secretly sell backdoors?
 
Cryptocurrency - doing money laundry ... legally!
(I don't own any cryptocurrency)
 

« first day (4948 days earlier)