How to SSH Properly

https://gravitational.com/blog/how-to-ssh-properly/
How to set up internal CAs and 2fa