GeistHaus
log in · sign up

It's Now Possible To Sign Arbitrary Data With Your SSH Keys

agwa.name

ssh-keygen can sign and verify signatures, and it's way better than PGP

5 pages link to this URL
Git signoff and signing like a champ

Other Git related articles on DEV from me: A clean Git history with Git Rebase and Conventional...

1 inbound link article en careerproductivitydiscusssoftwarecodingdevelopmentengineeringinclusivecommunity
Easily Using SSH with FIDO2/U2F Hardware Security Keys

A lot of new hardware security keys (Yubikey, Nitrokey, Titan, etc.) now support FIDO2 (aka U2F aka Webauthn aka Passkey; yes it’s a mess). So does OpenSSH. This spells good news for us, because it is far easier to use than previous hardware security types (eg, PKCS#11 and OpenPGP) with ssh. A key benefit of all this, if done correctly, is that it is actually impossible to access the raw SSH private key, and impossible to use it without the presence of the SK and a human touching it.

2 inbound links article en public