bpence

OpenSSH Server + AbsoluteTelnet SSH Client Purpose This article shows the minimal server-side configuration required to enable SSH user certificate authentication when using: It is intentionally narrow in scope.It does not describe certificate enrollment workflows, CA operational practices, or enterprise key management, which vary widely by environment. If your server is configured as described here,

Client Configuration (OpenSSH-Compatible Behavior) Overview SSH user certificates allow you to authenticate using a signed public key instead of managing per-server authorized_keys files. From a client perspective, certificates augment existing SSH keys — they do not replace them. AbsoluteTelnet implements SSH user certificates using OpenSSH-compatible, file-based behavior. If you already have SSH public key and

This guide walks you from zero → working login using OpenSSH Secure Keys (sk-ssh-*) on a hardware token (YubiKey, Nitrokey, SoloKey, Google Titan, etc.) with AbsoluteTelnet/SSH. Important behavior: AbsoluteTelnet does not generate or auto-discover Secure Keys. You must create the key stub with ssh-keygen, then tell Absolute which stub file to use for a given

We’re pleased to announce that AbsoluteTelnet/SSH now includes support for OpenSSH Secure Keys (“sk-ssh” keys), adding modern FIDO2/WebAuthn hardware authentication alongside the PKI and smart-card systems AbsoluteTelnet has supported for years. This update brings AbsoluteTelnet into alignment with the security model used by recent OpenSSH releases, while preserving Absolute’s long-standing emphasis on user-controlled, predictable authentication.

We’re excited to announce that ChaCha20-Poly1305, one of the fastest and most secure modern SSH encryption algorithms, is now fully supported in AbsoluteTelnet/SSH. This upgrade brings faster performance on all platforms, improved security, and broader compatibility with modern OpenSSH servers — especially on systems where AES acceleration is limited. 🔒 What Is ChaCha20-Poly1305? ChaCha20-Poly1305 is

We’re proud to announce the release of AbsoluteTelnet/SSH version 13.13, the newest update to our trusted Windows SSH and SFTP client. This release introduces cutting-edge security features, improved file-transfer performance, and expanded compatibility with next-generation cryptographic standards — all while maintaining the rock-solid reliability AbsoluteTelnet is known for. 🚀 What’s New in 13.13 1️⃣ AEAD

New in version 13.11! Windows-only for this guide. If you use another agent (OpenSSH or Pageant), those are still supported; this release adds a smooth path for teams already standardized on 1Password. Read the full setup guide for 1Password + AbsoluteTelnet on Windows →

We’re excited to announce that AbsoluteTelnet/SSH now supports external authentication agents! 🎉 This means you can now use your favorite agent—like OpenSSH Agent, PuTTY Pageant, or the 1Password SSH agent—to manage your keys securely. Unlock your private key once and reuse it across all your AbsoluteTelnet sessions without re-entering passphrases. Why this matters: We’ve also

How to Connect AbsoluteTelnet/SSH to a Synology NAS using SFTP Connecting AbsoluteTelnet/SSH to Synology NAS Learn the simple steps to connect your Synology NAS device using the AbsoluteTelnet SSH client. Securely manage your files, access your NAS remotely, and unlock advanced configuration options. These instructions were developed specifically for the DS223j device, but should be

While configuring a new server for sendmail, it is a good practice to install DKIM to sign outgoing messages. OPENDKIM is usually my choice, but on Amazon Linux 2023, opendkim is currently not available in the official distribution. After a bit of searching, I could not find an up-to-date guide that worked, so I had