Then there’s the more controversial possibility that with such a large userbase, SSH could encroach on what was traditionally PGP’s territory. Giving someone a new account with password “changeme” is already long obsolete. How about when SSH signatures become mainstream? https://mobile.twitter.com/damienmiller/status/1452796122250...
If you have your system set to automatically use said key other SSH servers you connect to can tie that to your github user, which technically is a privacy leak, but generally not a serious concern. But if you want to keep a github (or other) account private, take care to give it a dedicated key and only have git/SSH use it when connecting to that specific site.
Not sure how you can get more than one key, in any of these cases.
Shit's fucked y'all.
Have a unique username / password combination for each website, right? Same is true for Github and all other SSH systems.
Also, Github provides Security Key support if you want to go that route. SSH keys are really not that different than passwords, but they seem more complicated, so maybe they are?
