> should instead be using RSA keys for ssh. No, you should be using ed25519 keys > THIS IS ALWAYS A BAD IDEA because once any account is compromised, ALL OTHE

> should instead be using RSA keys for ssh. No, you should be using ed25519 keys > THIS IS ALWAYS A BAD IDEA because once any account is compromised, ALL OTHER ACCOUNTS with locally stored keys ARE ALSO COMPROMISED. Not if you use passphrases on the key, generally together with an ssh agent, which is the best practice