On: How often should I rotate my SSH keys?

[dotancohen]

Or store your keys in a different user. I personally use have the users dotancohen and dotancohens (trailing s for Secure) on my laptop. I simply su into dotancohens and then from there SSH into various servers. The /home/dotancohens/ directory has 0700 permissions.

[jiveturkey → dotancohen]

How does this help you? If your dotancohen acct is compromised, I will just capture the password for dotancohens when you su to that account.

[dotancohen → jiveturkey]

Hmmm...

Maybe I should calling the su binary directly from /usr/bin/. Any thoughts on that? Or should I open a new VT?