News for hackers. Stuff that matters.

A comment on Show HN: My SSH server knows who you are. Parent comment

Re:Show HN: My SSH server knows who you are by nly on Tuesday August 04, 2015 @02:14PM (#10005173)
It's fairly pointless of github to publish your public key though. Nobody can trust that it's actually yours.
[ Parent | on HN ]
Re:Show HN: My SSH server knows who you are by chrisfosterelli on Tuesday August 04, 2015 @02:17PM (#10005194)
If you trust your connection to Github and trust that the person in control of the account is the person the account represents, then why not trust that key?
[ Parent | on HN ]
Re:Show HN: My SSH server knows who you are by the8472 on Tuesday August 04, 2015 @03:32PM (#10005680)
> It's fairly pointless

If it enables security research it's already a win in my eyes.

Might expose classes of weak keys in the future for example.

[ Parent | on HN ]
Re:Show HN: My SSH server knows who you are by chrisfosterelli on Tuesday August 04, 2015 @04:56PM (#10006230)
Great point. That's already happened, and a lot of weak keys were found [0].

[0] https://blog.benjojo.co.uk/post/auditing-github-users-keys

[ Parent | on HN ]