Re: [SAGE] The danger of SSH keys..

[Bryan Fullerton <bryanf@samurai.com>]

Dustin Puryear wrote:
> With keys, I want the ability to:
>
> 1. Expire keys at the server, even if that means rotating the public
> key out of authorized_keys2 (this could be done today using scripts).
>
> 2. Remove public keys when an employee is fired. Really, this can all
> be handled now via homedirs, requiring sudo, and protecting my root
> authorized_keys2.
>
>   

Sounds like you want a way to do CRL with SSH.

> 3. Require private keys to have strong passwords (no realistic way to
> enforce this).
>
> With this, I think the strength in using SSH keys could be
> dramatically increased.
>   

Absolutely, but I think it's unlikely to be implemented unless you do it 
yourself or pay someone.

Bryan