OPKSSH (OpenPubkey SSH) has been open-sourced under the OpenPubkey project, enabling SSH authentication via SSO protocols like OpenID Connect without requiring manual SSH key management. The code was previously owned by BastionZero (now Cloudflare), which donated it to the community. This eliminates the need for SSH keys while adding no new trusted parties beyond existing identity providers.
Background
OpenPubkey became an open-source Linux Foundation project in 2023, but its SSH integration component remained closed-source under BastionZero/Cloudflare until now. OIDC ID Tokens contain identity claims but lack the public keys needed for SSH authentication.
- Source
- Lobsters
- Published
- Aug 20, 2026 at 11:24 PM
- Score
- 7.0 / 10