与SSH密钥相比，使用GPG密钥签名git commit有什么优势? [英] What are the advantages of signing git commit with GPG key compared to SSH key

问题描述

我在大多数编程工作中都使用git，并在大多数提交中使用SSH密钥对其进行签名.但是，当我将git更新到版本2.17.1时，git默认使用GPG密钥而不是SSH密钥进行签名.

I'm using git for most of my programming work and sign them with SSH key for most of the commits. However, when I updated git to version 2.17.1, git defaulted to signing with GPG key instead of the SSH key.

我想知道使用GPG密钥而不是SSH密钥的优点和缺点，以及为什么git将GPG设置为默认值.

I would like to know what are the advantages and disadvantages of using a GPG key over a SSH key and why git is making GPG the default.

推荐答案

SSH密钥用于许多身份验证应用程序，例如登录ssh服务器，登录以及许多其他应用程序.

SSH key is used for many authentication application such as logging in to ssh server, logging in, and many other applications.

这意味着，如果您在不安全的环境中使用它，并且您的私钥被盗，其他人就可以伪造您的签名并登录到所有计算机.

This means that if you use it on a non secure environment and your private key is stolen, Others are able to fake your signatures and log on to all your computers.

GPG被广泛用于唱歌电子邮件文件和其他加密活动.因此，您可以在不太安全的环境中使用它，因为与对服务器进行窃取相比，伪造github远不如我们所愿.

GPG are widely used for singing emails files and other encryption activities. Therefore you can use it on a less secure environment since fake signing github is much less desirable than stealing your server.

这篇关于与SSH密钥相比，使用GPG密钥签名git commit有什么优势?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！