Flexible, secure SSH with DNSSEC

What this post added

This post introduces a new application of DNSSEC by demonstrating how public SSH keys can be securely stored in DNS TXT records. It details the technical implementation using OpenSSH's AuthorizedKeysCommand feature and unbound-host for DNSSEC validation, effectively turning Cloudflare's DNS into a Public Key Infrastructure (PKI) for SSH access. This enhances security by allowing dynamic revocation of access through DNS record removal and simplifies key management across multiple hosts.