An architecture note on Teleport's short-lived certificate model: the minimal Auth/Proxy/Agent topology, where the trust boundaries sit, why revocation is really TTLs, and the failure modes worth testing.

Community & Careers · Guide

certificate-authority zero-trust ssh-access

Community & Careers

Article0 replies3,405 followingPosted 05 Aug 2026, 10:29 UTC80.5K views3,907 votes

Choosing a Certificate Authority for Consul Connect mTLS: Built-in, Vault, or External CA

Compare Consul Connect's three CA options—built-in, Vault PKI, and external CA—with a decision matrix, trade-off analysis, and a step-by-step Vault integration example.

Community & Careers · Guide

certificate-authority

consul mtls

Community & Careers

Article1 reply1 comment4,514 followingPosted 02 Jul 2025, 16:13 UTC145.2K views3,681 votes

owner commented

Moving Beyond Static SSH Keys with Teleport Certificates

Stop managing static SSH keys. Learn how Teleport uses a Certificate Authority (CA) and short-lived certificates to secure infrastructure access and automate rotation.

Community & Careers · Blog

certificate-authority ssh-security

teleport