[{"data":1,"prerenderedAt":242},["ShallowReactive",2],{"project-16915819":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":42,"post_text":44,"what":45,"said":71,"maker_in_thread":150,"shape":161,"grid":165,"attempts":203,"same_week":204,"maker_shows":31,"maker_hidden":234,"reader_version":235,"card":236},"16915819","Krypton for Teams","Simple SSH Key Storage for DevOps","title","Show HN: Krypton for Teams – Simple SSH Key Storage for DevOps","https:\u002F\u002Fkrypt.co\u002Fteams","krypt.co","4kevinking",1524598358,2018,53,19,763,2155,36,"notable","security_privacy","ssh key management","mobile_app",[24,25,26,27],"ssh key storage","ssh keys","devops","ssh certificate authority","curious",0.029,{"positive":31,"neutral":32,"mixed":33,"critical":34},2,7,1,3,13,{"idea":37,"design":38,"execution":40,"privacy":41},{"positive":31,"critical":33},{"positive":39,"critical":33},0,{"positive":39,"critical":33},{"positive":39,"critical":39},[34,34,39,33,39,39,39,39,34,39,33,43,33,34,34,34,43,34,34],5,null,{"problem":46,"audience":54,"pricing":44,"motivation":44,"time_to_build":44,"stack":58,"openness":69,"stage":70,"team_size":69},{"value":47,"source":48,"evidence":49},"Managing SSH keys for teams on DevOps infrastructure securely","commenter",[50],{"id":51,"by":52,"text":53},"16915822","agrinman","Hey HN, we’re happy to announce that Krypton for Teams is now available! Thanks for all your support when we debuted Krypton Core, your early feedback strongly influenced the…",{"value":55,"source":48,"evidence":56},"DevOps teams",[57],{"id":51,"by":52,"text":53},[59],{"value":60,"source":48,"evidence":61},"Amazon Web Services (SQS, SNS)",[62,66],{"id":63,"by":64,"text":65},"16926722","MightySCollins","So I really wanted to use this for our team but hit a few problems. This seems to run on AWS and so does most of our systems if this does not work and with no way to export the…",{"id":67,"by":52,"text":68},"16929222","Krypton supports bluetooth for so even if SQS and SNS are down -- you can still SSH. We'll also shortly be rolling out USB support just incase bluetooth also happens to not be…","unknown","launched",{"praise":72,"objections":88,"requests":108,"questions":130,"alternatives":141},[73],{"value":74,"source":48,"evidence":75},"Good idea, strong approach to team SSH key management",[76,80,84],{"id":77,"by":78,"text":79},"16916672","hkhanna","Krypton looks awesome! A while ago I made https:\u002F\u002Fwww.sshpubkey.com\u002F to store different ssh public keys across different hosts. But Krypton appears to be a much more intelligent…",{"id":81,"by":82,"text":83},"16916674","sudosteph","Cool. I started building out something similar-ish once, but used a slack bot instead of mobile. I wasn't as concerned with temporary SSH creds, as much as I just wanted a way to…",{"id":85,"by":86,"text":87},"16916156","muzakthings","This is super cool! Do you have planned support for consensus-type mutlisig access? (ie: needing M of N approvals to acccess resources)",[89,96,101],{"value":90,"source":48,"evidence":91},"Long-lived SSH keys conflict with short-lived certificate access management",[92],{"id":93,"by":94,"text":95},"16916597","tptacek","Right, but that's a long-lived durable SSH credential. Part of the point of modern SSH access management is not to have any of those anymore.",{"value":97,"source":48,"evidence":98},"Unclear how personal and work use are separated on the same key",[99,100],{"id":63,"by":64,"text":65},{"id":67,"by":52,"text":68},{"value":102,"source":48,"evidence":103},"Security concern about storing keys on a personal phone versus a work laptop",[104],{"id":105,"by":106,"text":107},"16926063","wink","So I have a Linux laptop with full disk encryption that only gets used for work stuff and lives in the office 5-6 out of 7 days. If I move it, I'm paying attention. Contrast to…",[109,116,123],{"value":110,"source":48,"evidence":111},"Support for multisig M-of-N approvals",[112,113],{"id":85,"by":86,"text":87},{"id":114,"by":52,"text":115},"16916265","Yes! This is coming in the next few months. You'll be able to require multiple admins to approve production releases or really lock up sensitive machines. Supervised access…",{"value":117,"source":48,"evidence":118},"Ability to try local keys before Krypton",[119],{"id":120,"by":121,"text":122},"16916941","apazgo","1. All team actions should be prefixed under \"kr team\", right now i don't know what happens if i run \"kr add\" if i only want to add myself to a server, ie outside my team. 2.…",{"value":124,"source":48,"evidence":125},"Team-scoped command prefix and clearer kr add behavior",[126,127],{"id":120,"by":121,"text":122},{"id":128,"by":121,"text":129},"16919023","Problem with `kr add user@bastion` is that you as `user1` won't normally have access to ssh as `user2`, but \"authenticating as one user but modifying another\" would work of…",[131,137],{"value":132,"source":48,"evidence":133},"How does it fit with SSH certificate authority and short-lived access?",[134],{"id":135,"by":94,"text":136},"16916538","How does this work with modern SSH access management? If you were talking to an organization about maybe adopting this, and they told you they were planning in the medium term to…",{"value":138,"source":48,"evidence":139},"Can private keys be exported if the service is unavailable?",[140],{"id":63,"by":64,"text":65},[142,146],{"value":143,"source":48,"evidence":144},"Slack bot for temporary security group access",[145],{"id":81,"by":82,"text":83},{"value":147,"source":48,"evidence":148},"sshpubkey.com",[149],{"id":77,"by":78,"text":79},{"comments":34,"answered":31,"key":151},[152,155,158],{"id":153,"text":154},"16916576","The SSH key stored in Krypton can be signed just like a local key-pair. The public key is stored in ~\u002F.ssh\u002Fid_krypton.pub and SSH will look for the cert at…",{"id":156,"text":157},"16916700","Yes in this case the Krypton SSH key pair is long-lived, but the certificate issued to it by the server would be short-lived. How are users authenticating to this 2FA CA in the…",{"id":159,"text":160},"16918218","Point taken, the intention is to make each command more succinct and we overloaded the functionality of `kr add` to do so. `kr add` will add your public key if no members are…",{"commenters":162,"max_depth":163,"maker_replies":34,"first_comment_mins":39,"lifespan_hours":164},11,4,35,[166,168,170,172,174,175,179,181,183,185,187,189,191,193,194,196,199,201,202],[51,39,34,167,52,39],"project\u002Fneutral\u002Fnone",[135,33,34,169,94,39],"project\u002Fneutral\u002Fidea",[153,33,39,171,11,33],"project\u002Fneutral\u002Fexecution",[93,33,33,173,94,39],"project\u002Fcritical\u002Fidea",[156,33,39,169,11,33],[176,33,39,177,178,39],"16917571","commenter\u002Fneutral\u002Fnone","tenken",[180,33,39,177,94,39],"16917603",[182,33,39,177,178,39],"16921111",[120,31,34,184,121,39],"project\u002Fmixed\u002Fdesign",[159,31,39,186,11,33],"project\u002Fneutral\u002Fdesign",[128,31,33,188,121,39],"project\u002Fcritical\u002Fdesign",[81,34,43,190,82,39],"project\u002Fpositive\u002Fidea",[63,163,33,192,64,39],"project\u002Fcritical\u002Fexecution",[67,163,34,171,52,39],[105,43,34,195,106,39],"project\u002Fneutral\u002Fprivacy",[197,43,34,195,198,39],"16926330","aaomidi",[77,200,43,190,78,39],6,[85,32,34,169,86,39],[114,32,34,169,52,39],[],[205,210,215,220,225,230],{"id":206,"name":207,"points":208,"category":209},"16909714","Intuitive Linear Algebra and 3D Geometry",402,"learning_science",{"id":211,"name":212,"points":213,"category":214},"16912601","Classroomies",360,"consumer_social",{"id":216,"name":217,"points":218,"category":219},"16902628","Wunderscan",330,"productivity",{"id":221,"name":222,"points":223,"category":224},"16884979","cchound",239,"creative",{"id":226,"name":227,"points":228,"category":229},"16902896","Quart",173,"languages",{"id":231,"name":232,"points":233,"category":219},"16876636","Telescope",166,false,"v2",{"id":237,"name":5,"line":6,"ai":234,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":238,"top":18,"kw":239,"maker":11,"domain":10,"tier":19,"attempts":39,"strip":240,"url":9,"mix":241,"praise":74,"objection":90,"sub":21},16915819,0.03,[24,25,26,27],"3301000030151333533",[31,32,33,34],1794036565448]