National Institute of Standards and Technology has published a draft of new guidelines for secure shell, or SSH. The report outlines the primary risks associated with managing SSH user keys and offers 118 techniques for mitigating those risks. The draft NIST interim report 7966, “Security of Automated Access Management Using Secure Shell,” is open for public comment until Sept. 26. Many organizations are still failing to correctly manage secure shell credentials, says report co-author Karen Scarfone. “There’s a lot of automation behind the scenes that people have implemented and largely forgotten about,” she says.”]
Source: https://www.cuinfosecurity.com/ssh-keys-managing-risks-a-7248