Re:How to properly manage SSH keys for server access
by Cpoll on Sunday September 27, 2020 @11:01AM
(#24607123)
I came to the exact same conclusion as you.
I can see this working nicely in relaxed companies that are comfortable waiting for the signed keys to expire (but those companies probably also won't like the inconvenience of expiring keys).
With that said, there is an advantage, in that a revoked key will eventually expire even if the cronjob breaks.
I can see this working nicely in relaxed companies that are comfortable waiting for the signed keys to expire (but those companies probably also won't like the inconvenience of expiring keys).
With that said, there is an advantage, in that a revoked key will eventually expire even if the cronjob breaks.