GitHub

Security keys are now supported for SSH Git operations

May 10, 2021Kevin Jones
Security keys are now supported for SSH Git operations
SummaryAI, from the source post

This post details the implementation of security key support for Git operations over SSH, introducing new key types (`ecdsa-sk`, `ed25519-sk`) that bind SSH keys to physical security devices. It emphasizes the security benefits of moving sensitive key material off the local machine, protecting against malware and accidental exposure. The post also highlights the requirement for user presence verification (a tap on the security key) for remote Git operations to prevent unauthorized actions, and discusses the ongoing shift away from password-based authentication for Git operations.

More from the Post-quantum SSH security for Git access trail