Symantec/keymaster
View on GitHub ↗ ★ 123 Go archived
Short term certificate based identity system (ssh/x509 ca + openidc)
3 mentions on Hacker News by 2 people: 0 stories, 3 comments · first 2017-10-25 · latest 2019-10-27
20082026
-
…keys are are problem. But there are several open source solutions for this. I recommend keymaster ( https://github.com/Symantec/keymaster ) as it is designed with madatory 2FA and a user flow that does not require you to leave the CLI. (I…
comment by cviecco44 · 2019-10-27 · in Public keys are not enough for SSH security -
I think we have just the (Open Source) solution for you: https://bit.ly/Keymaster https://github.com/Symantec/keymaster This issues MFA-ed ephemeral credentials: SSH certs, Kerberos compatible X509 certs, X509 certs for Kubernetes and well…
comment by rgooch · 2019-07-16 · in How Uber, Facebook and Netflix Do SSH -
…with 2FA (VIP and U2F). We encourage people to adopt this to improve their security. Code: https://github.com/Symantec/keymaster Design document: https://docs.google.com/document/d/1AW3UROCJqTc3R4MLJXxmPUNS...
comment by rgooch · 2017-10-25 · in Short-Lived Certificates at Netflix