I finally stopped using GPG keys for SSH authentication. Now I purely use SSH keys protected by 2FA via security keys. Now I have to get used to “touching” for authentication!

It also looks like Git allows to use SSH keys for signing. Unfortunately GitHub doesn’t support such signatures yet. Once they do, I may change to that method.

Interactions (1)