4 ms·
Can you use this to id people for authentication? As in if someone pings your server and you get a key that matches their GitHub is it really that person's key
by graderjs 4y ago
Can you use this to id people for authentication?
As in if someone pings your server and you get a key that matches their GitHub is it really that person's key or could they be doing it without having the corresponding private key?
- vkoskiv 4y agoAnyone can download the public key and impersonate that person in a scheme like this.
- notpushkin 4y agoUnless you require them to authenticate using that key (which would obviously require them to have the private key on hand).
- arjvik 4y agoWhat you are describing is the current status quo