Comments (4)
Also confirmed on v2.1.3 of netbirdio/dashboard
image
from netbird.
Hi @timwsuqld, this was an intentional change to have some kind of key rotation for security reasons.
We can discuss if we allow users to have unlimited time keys again as it is the users own risk to decide if he wants that.
from netbird.
@pascal-fischer I'm not asking for unlimited time keys, just the ability to have keys longer than 1 year. We had been using 2 years as the sweetspot to allow rotation, without lots of additional work (rotating the keys requires recreating our deployment packages). Ultimately, we trust our key storage system, so 2 years is a good risk place for us. This is a regression, as we had already been given the ability to create them at 2 years, which has now been removed. I understand changing the UI to just be days, that actually makes it closer to the underlying API, a simple solution is to just allow up to ~750 days is instead of 365.
To be clear, we do try and rotate yearly, but this can't always happen, so having keys last 2 years gives us enough overlap when building our deployment packages.
from netbird.
Just tossing my 2 cents in here as well, being able to set long-lasting keys (including unlimited time) would be massively appreciated. IMO it should be up to the user/admin to work out a balance between risk and operational practicality.
I do appreciate the desire for security though, so perhaps a compromise could work? Some kind of warning and confirmation for long-lasting keys? A nagging indicator if the key is X days old?
Only commenting because I'm absolutely loving my evaluation of Netbird so far but the limited key lifetime is a major deal breaker for getting the rest of my org on board. Being able to set an unlimited time and then managing the rotating and revoking of keys manually would be ideal
from netbird.
Related Issues (20)
- Netbird Clients drop and never return
- label "triage-needed" should be renamed to " cant-help-you" HOT 2
- 'Add Exit Node' button missing in self-hosted setup HOT 3
- Get serial number of computer using netbird agent
- netbird conflicts with adguardhome on ubuntu 22 server HOT 5
- DNS Nameservers not working on MacBook Air HOT 4
- Default peer group for user role
- User public IP is not Changing to netbird IP HOT 9
- peer / route number display depend on the view
- Support landscape view on tablets
- Configuration to permanently disable the experimental `Enable remote SSH access` feature. HOT 2
- Nameserver being randomly unavailable HOT 5
- Podman Quadlets script for getting-started-with-zitadel.sh HOT 1
- Posture checks for policies HOT 1
- Secure RSS feed for Activity HOT 1
- DNS Resolver should return NXDOMAIN
- v0.27.3 not working on openwrt system HOT 13
- Monochrome icon option for dock/taskbar on Linux
- Option to Block a peer
- Relay migrate peers when manually disconnected
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from netbird.