Security keys are now supported for SSH Git operations
May 10, 2021Kevin Jones

Summary
This post details the implementation of security key support for Git operations over SSH, introducing new key types (`ecdsa-sk`, `ed25519-sk`) that bind SSH keys to physical security devices. It emphasizes the security benefits of moving sensitive key material off the local machine, protecting against malware and accidental exposure. The post also highlights the requirement for user presence verification (a tap on the security key) for remote Git operations to prevent unauthorized actions, and discusses the ongoing shift away from password-based authentication for Git operations.