Message-ID: <bbe65d50-9099-f156-1a69-5053e0c144f0@bitfehler.net>
Date: Thu, 24 Nov 2022 20:55:55 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.5.0
Subject: Re: SSH key last used indicator broken?
Content-Language: en-US
To: =?UTF-8?Q?Adam_M=2e_St=c3=bcck?= <adam@adast.xyz>,
 ~sircmpwn/sr.ht-discuss@lists.sr.ht
References: <8613258f-4ed5-2a1b-d844-95e5107222f2@adast.xyz>
From: Conrad Hoffmann <ch@bitfehler.net>
In-Reply-To: <8613258f-4ed5-2a1b-d844-95e5107222f2@adast.xyz>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

On 11/24/22 18:45, Adam M. Stück wrote:
> I setup my account 4/5 days ago and have been working with git 
> exclusively through SSH.
> 
> In my meta.sr.ht, the key states Last Used: Never

Not entirely sure if this is the case here, but the "last used" date 
gets updated during the user lookup for an incoming SSH key, which in 
turn is subject to caching (up to a week). Hence, the date can be off up 
to a week. I'm just guessing that the key might get cached on creation, 
too. If the date is still the same in a week, then something is broken 
for sure :)

Drew: given that this date is displayed prominently and can be 
considered somewhat sensitive, how do you feel about lowering the TTL 
for this, so that it is somewhat more precise?

Cheers,
Conrad