The Enchanted Tavern
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
zitrone 🍋 to Programmer Humor@programming.devEnglish • 1 month ago

me when i find out i can use ssh to sign my git commits

lemmings.world

message-square
49
fedilink
226

me when i find out i can use ssh to sign my git commits

lemmings.world

zitrone 🍋 to Programmer Humor@programming.devEnglish • 1 month ago
message-square
49
fedilink
alert-triangle
You must log in or register to comment.
  • @Thunderwolf@lemmy.world
    link
    fedilink
    1•
    edit-2
    1 month ago

    I don’t have much experience in the realm of gpg. My experience is mostly with TLS. From what I know, if you’re doing client authentication, you encrypt your message with your private key, and then the public key on a cert is used for validating that the message actually came from you.

    I think code signing is similar to client auth, but not positive. Again, I use TLS, but I’m not a professional

    https://about.signpath.io/code-signing/theory#%3A~%3Atext=Software+publishers+use+a+secret%2Cpart+of+the+distribution+package.

    Edit:

    What I found from Wikipedia:

    The client sends a CertificateVerify message, which is a signature over the previous handshake messages using the client’s certificate’s private key. This signature can be verified by using the client’s certificate’s public key. This lets the server know that the client has access to the private key of the certificate and thus owns the certificate.

    https://en.m.wikipedia.org/wiki/Transport_Layer_Security#Client-authenticated_TLS_handshake

    • @Xanza@lemm.ee
      link
      fedilink
      English
      1•1 month ago

      This is TLS authentication via SSH, which is a completely different ballgame than using SSH keys for data encryption, decryption, and verification.

Programmer Humor@programming.dev

!programmer_humor@programming.dev
Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programmer_humor@programming.dev

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

  • Keep content in english
  • No advertisements
  • Posts must be related to programming or programmer topics
  • 86 users / day
  • 443 users / week
  • 1.2K users / month
  • 3.86K users / 6 months
  • 1 subscriber
  • 1.41K Posts
  • 46.9K Comments
  • Modlog
  • mods:
  • Feyter
  • adr1an
  • @BurningTurtle@programming.dev
  • Pierre-Yves Lapersonne
  • UI: unknown version
  • BE: 0.18.2
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org