3 ms·
If the key is only used for signing, then why an SSH key?
by planede 4y ago
If the key is only used for signing, then why an SSH key?
- anotherhue 4y agobecause the ssh-keygen UI is considerably easier and likely more familiar than gpg. I shouldn't have to know what ElGamel is to sign a commit.
- sph 4y agoI have a pretty decent security setup (password manager, multiple SSH identities, OTP 2FA, Yubikeys) but GPG is such a usability nightmare I don't want to touch it with a 10 foot pole.
- account42 4y agoThat still doesn't answer why this needs to be solved by added SSH signing format to git (which everything in the ecosystem needs to adapt to) instead of creating a better gpg-keygen.
- joshmanders 4y ago> I shouldn't have to know what ElGamel is to sign a commit. I use gpg to sign my commits, it was as easy to setup as git ssh keys were... I don't know what ElGamel is either.