News for hackers. Stuff that matters.

A comment on Obtain a GitHub user's public keys. Parent comment

Re:Obtain a GitHub user's public keys by TheLoneWolfling on Monday June 16, 2014 @12:58PM (#7900059)
Not necessarily. It could do key pinning for example, which at least protects already-established users.
[ Parent | on HN ]
Re:Obtain a GitHub user's public keys by mitchty on Wednesday June 18, 2014 @06:47PM (#7913396)
Additionally, if you use gpg to build your ssh keys and have a trust/sign chain you could then pull this stuff with impunity as long as you keep the trust chain issues sorted.
[ Parent | on HN ]