Git has supported SSH-based signatures for a while now, including those backed b... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

fmajid on Nov 28, 2024 | parent | context | favorite | on: Emacs arbitrary code execution and how to avoid it

Git has supported SSH-based signatures for a while now, including those backed by FIDO hardware keys.

CarpaDorada on Nov 28, 2024 [–]

FIDO would be for authentication, not signing. It also supports SSH (and X.509, see <https://git-scm.com/docs/gitformat-signature>) but it does not support minisign or signify. There's a git module for signify, <https://leahneukirchen.org/dotfiles/bin/git-signify> but don't count on it being widely supported.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact