Signing Git commits with your SSH key (2021)

Re:Signing Git commits with your SSH key (2021) by smileybarry on Wednesday September 14, 2022 @08:43AM (#32836346)

Signing with a separate hardware-stored SSH key on a dongle (e.g.: Yubikey/FIDO2) will allow you to have a long-lived key without the risk of compromise.

[ Parent | on HN ]

Re:Signing Git commits with your SSH key (2021) by 8organicbits on Wednesday September 14, 2022 @10:02AM (#32837330)

If you're using a dongle, I expect you'd have your other SSH keys there as well. Is there a security benefit to using a separate SSH key if they all live on the same dongle? I'm having trouble thinking through that. Although, certainly the hardware dongle has security benefits over SSH keys on disk.

[ Parent | on HN ]

Re:Signing Git commits with your SSH key (2021) by smileybarry on Thursday September 15, 2022 @06:14AM (#32849628)

Yes -- you can separate identities if you want, and rotating keys means changing a lot less places, so you can compartmentalize your processes.

[ Parent | on HN ]