<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Yubikey on Ilya Rusalowski Hub</title><link>https://rivik.github.io/tags/yubikey/</link><description>Recent content in Yubikey on Ilya Rusalowski Hub</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 09 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://rivik.github.io/tags/yubikey/index.xml" rel="self" type="application/rss+xml"/><item><title>Hardware-backed SSH keys end to end: YubiKey, PIV, software alternatives, and where SSH CAs fit in</title><link>https://rivik.github.io/hardware-backed-ssh-keys-end-to-end-yubikey-piv-software-alternatives-and-where-ssh-cas-fit-in/</link><pubDate>Sat, 09 May 2026 00:00:00 +0000</pubDate><guid>https://rivik.github.io/hardware-backed-ssh-keys-end-to-end-yubikey-piv-software-alternatives-and-where-ssh-cas-fit-in/</guid><description>A working guide to using a YubiKey for SSH on a real Linux fleet — the four knobs (resident, touch, PIN, agent), a four-mode policy for root and Ansible, software-only alternatives, and where SSH CAs fit in.</description></item></channel></rss>