News for hackers. Stuff that matters.
Re:You don't want long-lived keys by collabs on Saturday April 25, 2026 @07:21AM (#47900546)
How does this apply to ssh public keys?
Re:You don't want long-lived keys by akerl_ on Saturday April 25, 2026 @09:24AM (#47901408)
> Long-lived production SSH keys may be copied around, hardcoded into configuration files, and potentially forgotten about until there is an incident. If you replace long-lived SSH keys with a pattern like EC2 instance connect, SSH keys become temporary credentials that require a recent authentication and authorization check.