Account Access Management & Permissions
Public keys are not enough for SSH security

Public keys are not enough for SSH security

10/25/2019 · Sam Rhea, Evan Johnson

What this post added

This post introduces the replacement of static SSH keys with short-lived certificates for infrastructure access, integrated with Cloudflare Access. It details how Cloudflare Access, Argo Tunnel, and Workers are used to achieve this by leveraging identity providers for SSO, generating short-lived certificates, and proxying SSH traffic through Cloudflare's network. The end-user experience is described as transparent, requiring installation of the `cloudflared` daemon and an update to the SSH config file.

Read the original post ↗