Comment on Obtain a GitHub user's public keysparentComments−TheLoneWolfling12yNot necessarily. It could do key pinning for example, which at least protects already-established users.−mitchty12yAdditionally, if you use gpg to build your ssh keys and have a trust/sign chain you could then pull this stuff with impunity as long as you keep the trust chain issues sorted.
Comments
Not necessarily. It could do key pinning for example, which at least protects already-established users.
Additionally, if you use gpg to build your ssh keys and have a trust/sign chain you could then pull this stuff with impunity as long as you keep the trust chain issues sorted.