4 ms·
Don't think I am the use case here. I have zero hesitancy to blow away a git ssh key for any reason and use different keys from different hosts which are not u
by tejtm 4y ago
Don't think I am the use case here.
I have zero hesitancy to blow away a git ssh key for any reason and use different keys from different hosts which are not used for anything else.
Entangling an ephemeral key as a supposedly permanent signature would have to be for things I had no long term commitment to.
- nomel 4y ago> I have zero hesitancy to blow away a git ssh key for any reason and use different keys from different hosts which are not used for anything else. I'm a little confused. I thought this was how you're supposed to do it, so you can easily revoke access for a particular host.
- denkmoon 4y agoGenerally yes, but here you're using this ostensibly ephemeral key as an identity. Usually you want your identity to _not_ be ephemeral, so that it can reliably identify you. Which is why this is a bit silly and I don't see why you'd do this rather than "good old" PGP.
- justsomeadvice0 4y agoLots of people use permanent-ish HSM-backed keys (like yubikeys) for SSH access so I guess this saves them from distributing another key? Outside of that I agree, I don't really see the point.
- stormbrew 4y agoMostly because using pgp (or more specifically gpg) is a pain in the ass and ssh-keygen is not
- wodenokoto 4y agoI can setup a pair of SSH keys. I have given up trying to setup PGP. So that's one reason to not use ""good old" PGP". Why can a PGP key be permanent but an SSH key not? I'm assuming both are just files and as a user you are required not to lose/give them away.
- trissylegs 4y agoI think you should be signing with a different key than your push/pull key. It's just so you don't have to use GPG when key signing is required.