Good ideas and conversation. No ads, no tracking. Login or Take a Tour!
- Here's a fun PoC I built thanks to Ben's dataset.
I don't want to ruin the surprise, so just try this command. (It's harmless.)
ssh whoami.filippo.io
For the security crowd: don't worry, I don't have any OpenSSH 0day and even if I did I wouldn't burn them on my blog. Also, ssh is designed to log into untrusted servers.–
I trust SSH's design to be protected against exploits a lot more than I trust SSL to be. Yes, the SSH design has a number of performance flaws that make it a poor replacement for SSL in general, but those aren't going to matter for git. Mostly HTTPS git is used for "I don't understand how to make an SSH key", which is a point against it for me.
forwardslash · 3532 days ago · link ·
IMO, yes, although the system you have setup seems to be pretty good. ssh with config files makes things so easy for me, I love it.