I am trying to decide whether OTP (Wikid) or Ssh Keys would be practically more secure in the following scenarios :
Option 1 - Wikid OTP : 3 Servers @ Slicehost; shared private network over which radius auth traffic passes. Hosts firewalled accordingly so that only my servers can talk to radius server. Assuming the Xen host (slicehost) is not compromised and their private network is trustworthy no other guests should be able to tamper with my radius traffic providing a reasonably (as per cost) secure & flexible setup
Option 2 - Good 'ol Ssh keys : 3 servers @ slicehost; No shared private network between the servers. I create ssh keys protected by a strong password. Simple and effective, providing my laptop is not compromised.
What are the Pros / Cons with associated solutions ?