3 ms·
>Your Pubkey can be used to cross-match multiple identities. Example: You have different coding personae. One that is activist, one that is company-peon. Differ
by jonnycomputer 5y ago
>Your Pubkey can be used to cross-match multiple identities. Example: You have different coding personae. One that is activist, one that is company-peon. Different accounts, same SSH pubkey in Github or other server with publicly listed pubkeys --> Same person confirmed.
How to practically manage this, with git in particular.
- hirundo 5y agoGenerate a different public key for each service. Don't use the one for github, etc., anywhere else.
- newaccount74 5y agoOpenSSH by default tries authenticating with all your identities. You should probably turn that off too.
- dspillett 5y agoOr keep sensitive identities in a different location, so they aren't automatically picked up like that. That forces you to specify an identity file when you need one of those, but that small inconvenience is probably not a concern if the identity is that sensitive.
- fstelzer 5y agoYou can configure which key to use when signing your work https://git-scm.com/docs/git-config#Documentation/git-config.txt-usersigningKey https://git-scm.com/docs/git-config#Documentation/git-config... i see that the docs are missing info on ssh there still. i will update this since with 2.34 you can also specify a ssh publik key literally in this variable or point it to a file with it.
- jonnycomputer 5y agoAh, this is what I was looking for. Thank you.