'Git' verified

Показать описание

Getting your commits verified on GitHub (with GPG signing)

Рекомендации по теме

Комментарии

Few points to Remember:
1. To generate PGP Key block: gpg --armor --export <key id>.
2. To sign, you have to include ' -S ' flag in your commits.

mayankgupta

Having to type a password for every push seems like a lot of effort though... 🙄

benslv

It's really dangerous to tell people to use gpg without teaching them how to use it properly and securely. Getting "Verified" means nothing if you aren't aware of what gpg even is.

Cyber_Lanka

Really happy to see a tutorial as simple as that. Was following docs a year ago and was new to all that and it was so much trouble. Looking at this really saves a lot of time. <3

BumbleCore

What's that font you are using? Looks cool!

samiulhaquesohan

i had to like it, after seeing svelte

sameer_veda

Yo finally they put it in HD. It’s text so it’s especially important it’s not potato quality unreadable

jemesmemes

ah yes finally a tutorial that works. Thanks a lot! :)

Kris_Zhang

Why does a official VS Code Channel Use a Mac and not Windows 10

ameershah

How do you get that colorful prompt? What's the PS1? :D

arlaxia

How do I get my GitHub email address 🤔🤔

ShivanshKaran

Thanks. Please what type of terminal you use for git !? I need it 🥺🤑

faezbajaber

official vscode channel uses mac, nice

RedS_DEV

si sente che sei italiano ma parli benissimo

ah

Why would you deliberately use RSA for signatures? (A slow cryptosystem from the 70s that requires huge keys to be even remotely secure) Even worse, why doesn't GPG give the option of using curves? And why does it even allow you to make a 1024 bit RSA key? Surely an RSA key should never be any shorter than 2048, though 4096-bit is just overkill, you're safe at 2048-bit until quantum computers come along, at which point we will have to discard all currently used asymmetric cryptosystems anyway.

Also, why do developers have to configure their own keys to get verified? Shouldn't there be some automated way to do this so they don't screw it up? This doesn't seem like very secure way of doing things to be frank, very prone to human error.

deidara_