4 ms·
It's fairly pointless of github to publish your public key though. Nobody can trust that it's actually yours.
by nly 11y ago
It's fairly pointless of github to publish your public key though. Nobody can trust that it's actually yours.
- chrisfosterelli 11y agoIf you trust your connection to Github and trust that the person in control of the account is the person the account represents, then why not trust that key?
- the8472 11y ago> It's fairly pointless If it enables security research it's already a win in my eyes. Might expose classes of weak keys in the future for example.
- chrisfosterelli 11y agoGreat point. That's already happened, and a lot of weak keys were found [0]. [0] https://blog.benjojo.co.uk/post/auditing-github-users-keys https://blog.benjojo.co.uk/post/auditing-github-users-keys