3 ms·
because the ssh-keygen UI is considerably easier and likely more familiar than gpg. I shouldn't have to know what ElGamel is to sign a commit.
by anotherhue 4y ago
because the ssh-keygen UI is considerably easier and likely more familiar than gpg.
I shouldn't have to know what ElGamel is to sign a commit.
- sph 4y agoI have a pretty decent security setup (password manager, multiple SSH identities, OTP 2FA, Yubikeys) but GPG is such a usability nightmare I don't want to touch it with a 10 foot pole.
- account42 4y agoThat still doesn't answer why this needs to be solved by added SSH signing format to git (which everything in the ecosystem needs to adapt to) instead of creating a better gpg-keygen.
- joshmanders 4y ago> I shouldn't have to know what ElGamel is to sign a commit. I use gpg to sign my commits, it was as easy to setup as git ssh keys were... I don't know what ElGamel is either.