Right, but GitHub can't unless it has your private key which it probably should'... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

sgarman on April 6, 2016 | parent | context | favorite | on: GPG signature verification

Right, but GitHub can't unless it has your private key which it probably should't(if it's password protected) but that's a discussion for another time.

Many people use the feature on GitHub to manage their projects like the merge button.

nickik on April 11, 2016 [–]

Their are two solutions.

1. Develop an browser API that can request GPG operations. Something like they are doing now with U2F

2. Github could pop up a script that can be copy pasted into the command line. The same way Keybase does it when you don't upload your private key

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact