Re:You don't want long-lived keys
by collabs on Saturday April 25, 2026 @07:21AM
(#47900546)
How does this apply to ssh public keys?
[ Parent
| on HN ]
> Long-lived production SSH keys may be copied around, hardcoded into configuration files, and potentially forgotten about until there is an incident. If you replace long-lived SSH keys with a pattern like EC2 instance connect, SSH keys become temporary credentials that require a recent authentication and authorization check.