4 ms·

I’ve always avoided blind signing endpoints for this reason. You’re reducing the authenticity guarantee by a thousandfold, and increasing so much complexity. I

I’ve always avoided blind signing endpoints for this reason. You’re reducing the authenticity guarantee by a thousandfold, and increasing so much complexity. I don’t think there’s an easier way though short of not supporting signatures in codespaces, and this definitely feels like a feature where the Codespaces product team’s roadmap was prioritised over the Security team.

semiquaver 3y ago
Now that SSH key signing is a thing, you might be able to use SSH agent forwarding to sign commits without having to hand over your private key.
- namibj 3y ago
  ...GPG had such a feature for ages: it's AFAIK largely a result from very modular/flexible smartcard/HSM support.
nightpool 3y ago
It would be better to generate a user-and-codespaces-specific private key that would be safe to give to the user by checking out in the codespace so that you can use normal GPG signing flows.