The Evolution of SSH Authentication: From Passwords to Today
summary
Survey of SSH authentication history explaining how methods evolved from passwords to modern mechanisms like public-key authentication and agent forwarding, driven by infrastructure constraints and use cases. Compares different SSH authentication approaches, their security trade-offs and when each method is appropriate for privileged access to Unix-like systems.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 2:12Passwords and MFA problems
- 3:39SSH keys drawbacks
- 7:30Key delivery infrastructure challenge
- 10:41New auth system requirements
- 13:11Key and token storage
- 16:23U2F token deployment
- 18:55SSH agent and user migration
- 21:01SSH certificates structure
- 23:10NSS module optimization
- 26:10Container access
- 28:40Implementation results and support
- 32:36Transition period and password removal
- 35:15Security questions and bastions
related talks
15mThe evolution of user logins
44mEngineering Secure SSH Access for Engineers- 44mEngineering Secure SSH Access for Engineers
11mIf You’re Not Using SSH Certificates You’re Doing SSH Wrong
50msshlogin: securely authenticating to remote Linux systems via ...
41mA better way to SSH: Introducing SSH certificates
15mUp your SSH security game
52mRemoting evolving - SSH