I like using short-lived SSH certificates, and avoiding long-lived keypairs entirely. Vendor post but it summarises the operational and security problems well.

I like using short-lived SSH certificates, and avoiding long-lived keypairs entirely. Vendor post but it summarises the operational and security problems well. https://smallstep.com/blog/use-ssh-certificates/ https://smallstep.com/blog/use-ssh-certificates/