5 ms·
A lot of the comments here are along the lines of "My identity is public anyway." That response is ridiculous. Should you have been operating under a pseudony
by nsmartt 14y ago
A lot of the comments here are along the lines of "My identity is public anyway."
That response is ridiculous. Should you have been operating under a pseudonym, this would be a way to tie that pseudonym to your real name.
I should be told that my public keys are made available by Github. Had I been, I wouldn't have had a public key on my account.
- helper 14y agoHow can you tie a public key to a real name? What information does a public key leak?
- nsmartt 14y agoBy comparing the indexed public keys with github accounts. Should a user have both a pseudonymous account and an account tied to his or her real name, this would compromise the identity of the pseudonymous account. Edit: To be clear, this would only work if the same public key was used for both accounts.
- _kst_ 14y agoIf the target used the same public key elsewhere, that ties two accounts to the same person, which may or may not help figure out who that person is.
- mooism2 14y agoOr you could have a separate public key that you use only for Github, e.g. by using IdentitiesOnly and IndentityFile settings in ~/.ssh/config.
- nsmartt 14y agoIf I ever knew this, I'd long forgotten it. Thank you.
- Millennium 14y agoHonestly, the fact that they're called "public keys" at all should clue you in to the fact that they can be made available. The concept doesn't work if they aren't made available.