How often should I rotate my SSH keys?

Re:How often should I rotate my SSH keys? by loulouxiv on Friday February 26, 2021 @03:00PM (#26279179)

The token must be pin protected to be eligible to resident credentials. I think it is one of the significant differences between FIDO1 and FIDO2. I also think that you can use ed25519-sk with a non pin-protected, but then you won't be able to authenticate if you can't access to the generated key file (if it was deleted or on another machine)

[ Parent | on HN ]

Re:How often should I rotate my SSH keys? by shandor on Friday February 26, 2021 @05:28PM (#26280611)

Thanks for the info. Makes complete sense to require a PIN with resident keys, I'm glad. Now I'll need to write the article myself, with this information included :)

[ Parent | on HN ]