Interesting detail: You only need the public key to check if a server accepts a key, thereby disclosing who has access to it.

You can download any user's public keys from GitHub or GitLab, including private instances.

rushter.com/blog/public-ssh-ke

Follow

@jomo Maybe that's why they are called "public"?

@jomo Oh wait, now I get what you mean... sorry, long fuse.

Sign in to participate in the conversation
Mastodon

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!