4 ms·
It verifies the signature but I was able to just add a public key that I found online to my account.
by kevincox 5y ago
It verifies the signature but I was able to just add a public key that I found online to my account.
- devrand 5y agoWill Github verify a commit associated with a GH account via an unverified e-mail address? If so then it's probably fine since you would have to demonstrate ownership of an e-mail address that was contained in the signed payload, or you would have to be able to sign payloads yourself (i.e. you have the private key).