Support for signed SSH keys

[sandstrom]

Support for signed SSH keys would enable integration with Github's CA support. Where each key can be signed and tied to a particular Github user.

Here is an example:

ssh-keygen -s ./ca-key -V '+1d' -I KEY-IDENTITY -O extension:login@github.com=USERNAME ./user-key.pub

https://docs.github.com/en/enterprise-cloud@latest/organizations/managing-git-access-to-your-organizations-repositories/about-ssh-certificate-authorities#issuing-certificates

Maybe support for this might be coupled with CLI support for secretive? To avoid having to build UI for all of it, and to support automation.

Example of CLI usage for a native app

/Applications/Ghostty.app/Contents/MacOS/ghostty --help 

[maxgoedjen]

This is actually supported (SSH certificates) – you can just put the cert in the public key folder next to the public key for the original key.

[sandstrom]

Ah, got it! Thanks Max! :)