|
|
|
|
|
by 0xEFF
1176 days ago
|
|
Yes for a host key. It’s like accidentally publishing the tls key for https://accounts.google.com The host key is the only thing ensuring you’re actually talking to GitHub.com when you push code. To add to sibling comments, it should not have been possible to make this mistake. That it was possible is concerning. |
|