42 ms·
Would it be more secure to access a https secured server to get the keyfile then?
by pbhjpbhj 4y ago
Would it be more secure to access a https secured server to get the keyfile then?
- tialaramex 4y agoYes, GitHub's announcement provides the correct new public RSA key, and it also provides instructions for a curl invocation which does all the work if you don't trust yourself to copy-paste text or don't understand how.
- dheera 4y agoOnly if the https server cert wasn't compromised at the same time as the ssh key. For all we know, this entire announcement of "we have a new key" could be staged.