Post #2483851

@gumnos@mastodon.bsd.cafe ssh certificates for the win. Just sign all your hosts ssh keys with it and you can have a single line in known_hosts to validate it. So even if you reinstall, so long as you sign the ssh server keys with that one key it all works. You can also do the same for user ssh keys. I've been using this system for about 2 years on my servers and it's great. I store the private key in a safe place of course.