Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Obtain a GitHub user's public keys

github.com

Post reply on HN
Print view View original

11–20 of 31 posts

Re: Obtain a GitHub user's public keys

#11

Post by stedaniels »

voltagex_ wrote: post #3
kentwistle wrote: post #2

Found out about this today, you can prepend any GitHub username with .keys to fetch their public keys.

What can this be used for? I'd love to display my GPG key there instead but I guess that's not possible.

Have you seen https://keybase.io/ that's an ideal place for your GPG keys (and more) :-)

Re: Obtain a GitHub user's public keys

#13

Post by andreaso »

riffraff wrote: post #4
voltagex_ wrote: post #3

Earlier quoted context omitted.

What can this be used for? I'd love to display my GPG key there instead but I guess that's not possible.

as an alternative to ssh-copy-id ?

Yepp, and there is already an existing tool, which currently supports GitHub as well as Launchpad.

http://manpages.ubuntu.com/manpages/trusty/en/man1/ssh-impor... https://launchpad.net/ssh-import-id

Re: Obtain a GitHub user's public keys

#16

Post by peterhajas »

stedaniels wrote: post #11
voltagex_ wrote: post #3

Earlier quoted context omitted.

What can this be used for? I'd love to display my GPG key there instead but I guess that's not possible.

Have you seen https://keybase.io/ that's an ideal place for your GPG keys (and more) :-)

I can't tell if it's finished yet:

> Keybase will be a public directory of publicly auditable public keys.

Nor do I understand why I'd use it. Do lots of people post GPG encrypted messages to each other on gist?

Re: Obtain a GitHub user's public keys

#17

Post by thu »

octo_t wrote: post #15
intull wrote: post #14

Is this supposed to be okay? I mean, even though they are public keys, its not like I really want them to be _that_ public!

Whats the harm? At most, people can encrypt things with your public key and then...?

I'd say that at most it forces you a bit more (if that was necessary) to check the SSH fingerprint of the machines you're SSHing into.

Re: Obtain a GitHub user's public keys

#18

Post by mseebach »

peterhajas wrote: post #16
stedaniels wrote: post #11

Earlier quoted context omitted.

Have you seen https://keybase.io/ that's an ideal place for your GPG keys (and more) :-)

I can't tell if it's finished yet: > Keybase will be a public directory of publicly auditable public keys. Nor do I understand why I'd use it. Do lots of people post GPG encrypted messages to each other on gist?

It's an attempt to solve the key distribution problem. By having you verify your keys on third party sites, a MITM or NSL attack (providing you with fake keys so your messages can be intercepted) gets a lot harder as you have to attack n sites simultaneously instead of one.

Re: Obtain a GitHub user's public keys

#20

Post by stared »

octo_t wrote: post #15
intull wrote: post #14

Is this supposed to be okay? I mean, even though they are public keys, its not like I really want them to be _that_ public!

Whats the harm? At most, people can encrypt things with your public key and then...?

For example they can identify my different accounts, when I sue the same key.
Post reply on HN