[jonnycomputer]

>Your Pubkey can be used to cross-match multiple identities. Example: You have different coding personae. One that is activist, one that is company-peon. Different accounts, same SSH pubkey in Github or other server with publicly listed pubkeys --> Same person confirmed.

How to practically manage this, with git in particular.

[fstelzer]

You can configure which key to use when signing your work https://git-scm.com/docs/git-config#Documentation/git-config...

i see that the docs are missing info on ssh there still. i will update this since with 2.34 you can also specify a ssh publik key literally in this variable or point it to a file with it.

[jonnycomputer]

Ah, this is what I was looking for. Thank you.

[hirundo]

Generate a different public key for each service. Don't use the one for github, etc., anywhere else.

[newaccount74]

OpenSSH by default tries authenticating with all your identities. You should probably turn that off too.

[dspillett]

Or keep sensitive identities in a different location, so they aren't automatically picked up like that. That forces you to specify an identity file when you need one of those, but that small inconvenience is probably not a concern if the identity is that sensitive.