• SigmarStern@discuss.tchncs.de
    link
    fedilink
    arrow-up
    1
    ·
    3 months ago

    Are you using your public ssh key for signing? Wouldn’t it make more sense to use the private one as people can then verify your identity by using your public key?

    • codesaIat@discuss.tchncs.de
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      3 months ago

      Ha, good catch! Behind the scences, git is actually using your private key to sign the commit. You’re only specifying the ssh key git should ask ssh-agent about. You can also specify the private key and actually need to when not using an agent and the key is not available. See docs