I have given up on OpenSSH's built-in certificate handling because it does not properly support revocation. It's not possible to have 100% of your keys on a short duration, so you have to cook up a revocation system.…
That comparison is dishonest. You are claiming that if rmrfstar can't do it, it doesn't exist. If a given forum commenter does not know how to buy someone's cell-tower location does not mean that an experienced…
I have given up on OpenSSH's built-in certificate handling because it does not properly support revocation. It's not possible to have 100% of your keys on a short duration, so you have to cook up a revocation system.…
That comparison is dishonest. You are claiming that if rmrfstar can't do it, it doesn't exist. If a given forum commenter does not know how to buy someone's cell-tower location does not mean that an experienced…