Long Lived SSH Keys Considered Harmful
Monday, September 3, 2018
Disclaimer: This advice goes for any credential, including and especially passwords
tl;dr: You should, at regular intervals, change out and retire old SSH keys.
SSH keys are dangerous An SSH key should be considered a short-lived resource and as such and should be refreshed periodically. Here are a few reasons why:
They can be compromised They are highly privileged They can be automatically generated They can easily be replaced on many services Refreshing your SSH keys has the added benefit of following the Let’s Encrypt School of Critical Process Management:
…