Do you administer servers, and wish you could re-key them without sowing massive pain and confusion among your users (or worse, encouraging bad security habits among them)? Do you wish you could -identify the users to grant access by name, instead of by opaque -string? Do you wish you could rapidly grant or revoke access to a -user across a group of machines by enabling or disabling -authentication for that user?
+grant access to your users by name, instead of by opaque string? Do +you wish you could rapidly revoke access to a user (or compromised +key) across a group of machines by disabling authentication for that +user?A group of us have been working on a public key infrastructure for SSH. Monkeysphere makes use of