Henning Follmann wrote: > Either keys generated thru ssh-genkey or if you use > gnupg to manage your keys. > gnupg has the advantage that you could use > a gnupg card to store your keys. Thanks for the clarification, it was purely out of interest. As someone who has discovered ssh CAs only relatively recently I thought there were some other features I was missing out on. Thomas