Comment by Zambyte

6 days ago

Okay, but why is that something to be concerned about? How would one be able to probe to see if a server recognizes a public key? Why does that matter?

so, i used my public key. can someone please tell me what i should be worried about now?

  • If I have your public key I could probe a server to see if it recognizes that public key. Which would tell me information you might not want to be leaked.

    • Could you explain how/why that would be an issue? I still don't understand. Isn't the nature of public keys meant to be that they're public?

      3 replies →

  • Github has public keys available, so the server owner could compare the key you sent to those - and that would identify your github username.

    Whether that's a concern or not is an open question, of course.