Re: [fingerprint] of github.com

On Sat, Dec 28, 2024 at 09:12:14PM +0000, A bughunter wrote:

quoted

 Please do a modicum of effort before posting to the list. This is literally
 the first hit on the search engines:
 https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
 

Yeah, but you should post the keys in the community incase an attacker would
intercept, block, or change those posted in the official location.

You have to keep two things in mind:

1. This mailing list has no relationship with GitHub.com. This list is about
   the software, not the hosting service that uses it.

2. The attacker (e.g. me) can also modify the archives of this mailing list to
   put whatever they want there, so you should absolutely not use the archives
   as a source of any kind of truth. :)

-K