Intermediate LevelGit & GitHub
How do SSH Keys and GPG Signature Signing work in Git and GitHub?
❓ Interview Prompt: Compare SSH keys for CLI authentication versus GPG/SSH commit signature signing for verified commit authenticity on GitHub.
SSH keys authenticate Git CLI commands (fetch/push) over public-key cryptography without passwords. GPG/SSH commit signing cryptographically signs individual commits, displaying a green Verified badge on GitHub.
Code Implementation Example
bash
git config --global commit.gpgsign true
git config --global gpg.format ssh
git config --global user.signingkey ~/.ssh/id_ed25519.pub
git commit -S -m "feat: signed verified commit"💡Configuring automatic SSH commit signature signing in Git.
🎯 Interview Key Takeaway
Use SSH keys for server CLI authentication, and configure GPG/SSH commit signing to display Verified badges on GitHub.
#SSH#GPG Signing#Security#Intermediate
Back to all Git & GitHub Questions→