Question

在Gite Hub,我要补充把我的计算机与我的账户联系起来的关键,我获得两种选择:创建SSH或GPG钥匙。

What is the difference between the two keys? and is there a preferred one to use?
I understand how to create both by following the guide on the site but I don t know which one is better to use.

Answer 1

我要补充一点,把我的计算机与我的账户联系起来的关键,我有两个选择。

You will need at least the SSH one, if you want to push back to your repository, using an SSH URL (since the public SSH key will authenticate you).
Start with SSH. See "Connecting to GitHub with SSH".

之后,您可以使用GPG签署承诺。

注: 自2022年8月以来, 还支持SSH承诺核查。

Vishwas M.R,在https://security.stackchange.com/a/120725> 当我已经利用SSH钥匙在我推动时验证自己时,我为什么要用GPG的钥匙签署我的承诺?

When you authenticate to Github with your SSH key, that authentication doesn t become part of the repository in any meaningful or lasting way.
It causes Github to give you access for the moment, but it doesn t prove anything to anyone who is not Github.

When you GPG-sign a Git tag, that tag is part of the repository, and can be pushed to other copies of the repository.
Thus, other people who clone your repository can verify the signed tag, assuming that they have access to your public key and reason to trust it.

Answer 2

我不想这样认为,在当地添加的有色人种的有色人种的经核实的承诺,而这一承诺是值得相信的。

友情链接