Hacker News Reader

I’ve always avoided blind signing endpoints for this reason. You’re reducing the authenticity guarantee by a thousandfold, and increasing so much complexity.

I don’t think there’s an easier way though short of not supporting signatures in codespaces, and this definitely feels like a feature where the Codespaces product team’s roadmap was prioritised over the Security team.

View on HN

It would be better to generate a user-and-codespaces-specific private key that would be safe to give to the user by checking out in the codespace so that you can use normal GPG signing flows.

Now that SSH key signing is a thing, you might be able to use SSH agent forwarding to sign commits without having to hand over your private key.

...GPG had such a feature for ages: it's AFAIK largely a result from very modular/flexible smartcard/HSM support.

Reply on news.ycombinator.com