Add canonical signed operation envelopes
This commit is contained in:
parent
bfc5df698c
commit
373ff53d5c
12 changed files with 255 additions and 11 deletions
|
|
@ -51,9 +51,9 @@ discovery is enabled by default with `[iroh].local_discovery = true`.
|
|||
|
||||
SSH keys are used as admin trust anchors and ecosystem integration points.
|
||||
OpenSSH, FIDO, and YubiKey-backed keys can sign geth trust objects through
|
||||
explicit namespaces such as `geth.keychain.v1@geth.local`. Future SSH proxying
|
||||
may carry SSH protocol bytes over authorized Iroh streams, but the geth transport
|
||||
remains Iroh.
|
||||
canonical geth envelopes with explicit namespaces such as
|
||||
`geth.keychain.v1@geth.local`. Future SSH proxying may carry SSH protocol bytes
|
||||
over authorized Iroh streams, but the geth transport remains Iroh.
|
||||
|
||||
SSH certificate request and renewal flows are managed as geth metadata. A node
|
||||
can create a certificate request, another machine can approve it and receive an
|
||||
|
|
|
|||
Loading…
Reference in a new issue