SSH public keys for any GitHub user

If you have your system set to automatically use said key other SSH servers you connect to can tie that to your github user, which technically is a privacy leak, but generally not a serious concern. But if you want to keep a github (or other) account private, take care to give it a dedicated key and only have git/SSH use it when connecting to that specific site.

Re: SSH public keys for any GitHub user

#6

Post by s_m » Tue, Dec 14, 2021, 2:44 AM UTC

what do you think "public" means

Re: SSH public keys for any GitHub user

#7

Post by ppierald » Tue, Dec 14, 2021, 2:45 AM UTC

Not a huge deal in and of itself? Good key management processes would have you rotate every so often. However, we probably have a lot/most/all of us that use the same SSH key for many systems and loss of that private key would be compromise of your Github account.

Have a unique username / password combination for each website, right? Same is true for Github and all other SSH systems.

Also, Github provides Security Key support if you want to go that route. SSH keys are really not that different than passwords, but they seem more complicated, so maybe they are?

Re: SSH public keys for any GitHub user

#8

Post by nixpulvis » Tue, Dec 14, 2021, 2:46 AM UTC

Funny, I was just trying to use Git for Windows the other day, and was completely unsuccessful without authentication, even just to pull a public repo.

Shit's fucked y'all.

Re: SSH public keys for any GitHub user

#9

Post by junon » Tue, Dec 14, 2021, 2:47 AM UTC

nixpulvis wrote: post #8

Funny, I was just trying to use Git for Windows the other day, and was completely unsuccessful without authentication, even just to pull a public repo. Shit's fucked y'all.

What's this have to do with the keys API?

Re: SSH public keys for any GitHub user

#10

Post by NickKampe » Tue, Dec 14, 2021, 2:47 AM UTC

super useful when adding users keys