Zimmiebob_zim@infosec.exchange
Sep 9, 2026, 2:37 AM@gemelen More interesting would be certificate login, as you don’t need an authorized_keys file at all for that.
Replies
gemelengemelenSep 9, 2026, 3:09 AM@bob_zim
It still converges to the same problem that zfs load-key has no input from a remote login.- Zimmiebob_zim@infosec.exchangeSep 9, 2026, 4:08 AM
@gemelen Yeah, but it gets a little more complicated because with SSH certs, the server doesn’t even have preexisting knowledge of the user’s public key. And if the user changes certs for whatever reason, their filesystem key would likely be unrecoverable.
Might be doable via key escrow with a TPM or the like. Have the HSM respond to a valid signed challenge which with the symmetric key for the user who signed it.