2 ms·
Not necessarily. The "public" in "public key" is not an announcement of intended global availability, but rather role in contrast to "private key". There are ma
by gojomo 11y ago
Not necessarily. The "public" in "public key" is not an announcement of intended global availability, but rather role in contrast to "private key". There are many reasons people or systems might want to keep "public keys" obscured or pseudonymous.
Still, many probably don't mind the public disclosure of Github account public keys.
But, the more serious issue here goes beyond that. In an unexpected and likely unintended way, one's Github identity is revealed to a third party, along with your origin IP and quite possibly other SSH keys used with other systems.
It's that set of mappings – IP <-> Github identity <-> other identities – that violates expectations.