A path should be written `/root`...

You can also configure multiple CA for client auth, and on the client side multiple ca to verify host keys.

Tfa contains the whole session dude.

I will definitely start to read this out loud to my 5 year old. He will love it. Thanks for sharing your finding.

Just FYI. Almost every launcher that offers commercial services has such a user manual. I was involved in preparing one such manual. A collection of these manuals can be quite entertaining for 5 year olds. You should be able to easily find them from the websites of the respective companies or agencies.

Thanks for the tip. I only knew about old manuals of the space shuttle.

NTRS is an amazing resource for that:

https://ntrs.nasa.gov/search?q=shuttle&page=%7B%22from%22:0,...

Have an LLM rewrite it in Seussian verse.

You can also sign ssh host keys with an ssh ca.

See ssh_config and ssh-keygen man-pages...

In addition to equvinox (hey again): In enterprise networks you should rely on 802.1x or what's also valid use case is the use of ipsec to ensure the local client connection is "safe".

Some 802.1x have inherent mitm attacks that have been called out since 2004 and never got the v2 (https://www.rfc-editor.org/rfc/rfc6677.html). EAP-TLS however is the best practice here + VLANs.

What do you think about to just use open networks and the use of IPsec/wireguard?

> and thought to myself "they do textbooks?".

Indeed: https://systemsapproach.org/books-html/

If you are cheap on money, but you do have time, and like to get into networking, I can only highly recommend https://book.systemsapproach.org/

The link to https://book.systemsapproach.org/internetworking/routing.htm... is in the first paragraph.

I.e. bird detects interface failure but this affects only your side of decision making. For bidirectional failure detection you do BFD with BGB. BFD default timers are 3 times 30 ms, iirc.

You can configure your assigned network numbers that other AS are allowed to announce certain networks of your own. Not uncommon for in examples authoritative name server addresses.

TIL, I always thought IP:ASN mappings were 1:1.

With cloud providers and such the wording could also be "bring your own address".

Here you go: https://en.wikipedia.org/wiki/Resource_Public_Key_Infrastruc...

That, and ASPA, and https://manrs.org/