I thought using per-service SSH keys was an useful mitigation against e.g. GitHub public keys being exposed:<p>- <a href="https:&#x2F;&#x2F;blog.benjojo.co.uk&#x2F;post&#x2F;auditing-github-users-keys" rel="nofollow">https:&#x2F;&#x2F;blog.benjojo.co.uk&#x2F;post&#x2F;auditing-github-users-keys</a><p>- <a href="http:&#x2F;&#x2F;arstechnica.com&#x2F;security&#x2F;2015&#x2F;06&#x2F;assume-your-github-account-is-hacked-users-with-weak-crypto-keys-told&#x2F;" rel="nofollow">http:&#x2F;&#x2F;arstechnica.com&#x2F;security&#x2F;2015&#x2F;06&#x2F;assume-your-github-a...</a><p>- <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9645703" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=9645703</a>