[oxygen_crisis]

> seemingly private identifiers are SSH pubkeys (I always delete the comment trailer), which are sent to every server you SSH to and also published to places like GitHub

I use this in my .ssh/config file:

  Host *
    IdentitiesOnly = yes

... then you'll only send keys that are specified per-host in .ssh/config with 'IdentityFile' or with a command-line argument.

More discussion: https://news.ycombinator.com/item?id=10004678

[ayewo]

I've always wondered if there was any downside to having my default private keyfile being shared whenever I fail to use the "-i" option to specify the correct keyfile when authenticating against a new server.

Thanks for linking to the previous HN discussion!