I have accounts on several third party sites - Bitbucket, Bluehost, etc.
From what I've gathered, it is common practice to use one key pair for all [id_rsa, id_rsa.pub], but only to give out the public key
Is that the correct usage, or is it better to generate a new pair for each site?
It would seem to me that this is insecure - any site I trust with nefarious intention [or that is hacked] could take my private key when I connect the first time, and use it to go into the other sites.
Can someone who understands SSH verify that its safe to use one key pair everywhere, and if so, perhaps explain why?
Also, if I have two home computers, is there any reason to use different key pairs from each?