Viewing profile — NjU24E48YqdBGnG

Yes, I could. In fact I actually also use the PIV functionality, just not for SSH. The GPG answer seems simpler, at least for my use-case, since it really does just require SSH and…

I just store my SSH key in my Yubikey and then I can SSH from any computer that has SSH and GPG installed. Gets rid of the "generate and sign a key that then sits on that computer …

We use SSH certificates for host keys at work. That way we can avoid the constant "is this the host key you were expecting?" that everyone just pounds 'y' through. I've used user c…