User avatar
minwlfNotice flori_ava_star~cursor_blinking @star@amazonawaws.com
4d
ssh commit signing > gpg commit signing
❤️1
3
3
17
1
User avatar
Jade @JadedBlueEyes@tech.lgbt
4d
@star But then you don't have key expiry iirc! Which for example breaks Nex's security posture
1
0
0
0
User avatar
minwlfNotice flori_ava_star~cursor_blinking @star@amazonawaws.com
4d
@JadedBlueEyes Sure, but for signing commits, "expiry" semantics often just mean removing the key from your account in the forge you're using. I think it's fiiiiiiiiiiineeeeeeeeeeee
1
0
0
0
User avatar
Jade @JadedBlueEyes@tech.lgbt
4d
@star Truee but there is a bit of a difference between this being a manual action you have to take in every place you use the key and an automatic action that happens everywhere at once unless you actively take action to prevent it
1
0
1
0
User avatar
minwlfNotice flori_ava_star~cursor_blinking @star@amazonawaws.com
4d
@JadedBlueEyes true. for me personally, i am not a fan of key expiry times. they give me anxiety D:
0
0
1
0