Hacker News Reader

Comment by simon04 | Hacker News Reader

Using a Token2 based id_ed25519_sk_rk key, I found very helpful to configure a different `pushurl` in `.git/config`. This allows to pull via HTTPS w/o a hardware touch.

    [remote "origin"]
            url = https://github.com/freeCodeCamp/devdocs.git
            pushurl = git@github.com:freeCodeCamp/devdocs.git

View on HN

GitHub dropped http authentication so this only works for public repos (not that the UX or security of http auth for git is nice).

Can git be configured to use different keys for push and pull? (You can obviously use different upstreams, but thats not as elegant.) Most git servers let you specify read vs read-write privileges (aka “deployment keys”) so you could use one key to pull updates that doesn’t need touch and another key to push (which does).

You configure separate entries in your ssh conf.

    Host gh-auth
      Hostname github.com
      Identityfile blah
      User git

pushurl = gh-auth:freeCodeCamp/devdocs.git

GitHub did not drop http auth. They prefer you use http instead of ssh.

What they dropped was auth using your account name and password. You need to use a token as your password or use an extra tool like their cli client to setup auth (but it sucks if you have multiple accounts).

Reply on news.ycombinator.com