Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Github integration #5

Open
chromakode opened this issue Mar 12, 2016 · 2 comments
Open

Github integration #5

chromakode opened this issue Mar 12, 2016 · 2 comments

Comments

@chromakode
Copy link
Collaborator

It should be easy to publish your personal sig repo to a Github repository. Perhaps using gh-pages?

@bengl
Copy link
Member

bengl commented Mar 25, 2016

Could a github user's already-public ssh keys be used to signed? e.g. https://github.com/chromakode.keys

@chromakode
Copy link
Collaborator Author

Interesting idea! In theory this is possible, you can convert from SSH -> OpenSSL -> GPG. The question would be how to verify the authenticity of the keys you get from GitHub -- in the naive case, it's just proof of GitHub auth. I prefer distributing/obtaining keys through a service like KeyBase since there are multiple points of verification, both through social media accounts and signing. An SSH key could work as an alternative to setting up gpg, though in many ways it's also advantageous to segregate your signing and authentication keys -- for security purposes, generating a separate key for code signing is probably a safer bet. What are your thoughts on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants