Threat model for SSH keys
Is it that much more secure than passwords? What are the better options?
TL;DR
I’ve never been a fan of SSH keys. After 20 years in cyber, for me they are just bad passwords that you must write down..
Many e.g. news.ycombinator.com disagrees.
For me the weaknesses of SSH are:

