Home | Notifications | New Note | Local | Federated | Search | Logout

Stefan Sperling@stsp@bsd.network

Posting mostly about tech stuff I'm working on but happy to read and chat about non-tech stuff too. I'm grateful to be learning so much about the world from all of you.

Tech stuff I'm working on currently includes OpenBSD, Apache Subversion, Software Heritage, Game of Trees, @gothub, Dulwich, and Plakar.

Toots get auto-deleted after one month.

www: https://stsp.name
languages: de/en, a little fr
cities: Berlin / Brussels
pronouns: he/him/his
Joined: 2026-10-21 16:00:29
2 notes, 0 following, 0 followers

Stefan Sperling@stsp@bsd.network (2026-10-30 17:57:38)
Some people who understand TLS very well (because they develop a TLS library), use this in their #Git config file. Maybe everyone else should use this, too.

[http "https://github.com/"]
      pinnedpubkey = sha256//8gWWkWa8AfAz0khtRYRodss7ieQPpu8Sd7DppK94eVo=

Stefan Sperling@stsp@bsd.network (2026-10-21 15:59:44)
#GIt repository clones from @gothub remain safe in spite of the number 4  #emudhra certificate because we only offer repository access via SSH, for both public and private access.

I wish more Git hosting sites would support anonymous SSH access as an alternative to cloning over HTTPS. When fetching source code to build and then run, manual key fingerprint verification seems safer to me than trusting the third party CA system.