Phil Haack • 7/20/2026

Sign Commits from Anywhere Without Your Keys Going Anywhere

This article details a setup for signing Git commits from remote devices (iPad, cheap laptop) using hardware-backed keys stored in Apple's Secure Enclave via Secretive. The author explains the security advantages over traditional SSH key files, the challenge of remote signing when Touch ID is required, and the solution that allows approvals to appear on the device in hand. Covers threat models, key revocation, and practical workflow for developers using remote coding setups.

0 comments

#git #Remote Development #Secure Enclave