Hacker News Reader

How does that work, do you know a good tutorial for this?

I made my own CA for this because nothing else could provide transparency regarding certificate issuance (whether an attacker issued a "spare" backdoor certificate)

- source code: https://github.com/silentsignal/zsca

- my talk about the design and results: https://pretalx.hsbp.org/camppp7e5/talk/D3E9HN/

Look for a tutorial on ssh certificate auth, and use ed25519-sk keys for the CA.

But PIV only supports keys up to 2048 bits. :<

I didn't say anything about PIV. The article I was replying to is talking about sk keys, and so am I.

this.