2025-02-03 23:53 UTC
@yossarian @homebrew thank you! I have mine (personal) still set for git signing via gpg with my keys on yubikey. (And ssh agent getting its key from gpg agent)
So I was curious if I should look into migrating
Replies (1)
-
@yossarian@infosec.exchange 2025-02-04 10:59
@jasonkarns @homebrew i would personally recommend it! IME ssh-based signing is a lot less brittle, although if you've already gone through the hoops of signing with a yubikey then the advantages might not be as immediate. (i used GPG commit signing for a very long time, but now i use 1password's ssh-agent on macOS and the normal ssh-agent on Linux with a small password manager integration to hold my secret key. makes things very easy!)