#GIt repository clones from @gothub remain safe in spite of the number 4 #emudhra certificate because we only offer repository access via SSH, for both public and private access.

I wish more Git hosting sites would support anonymous SSH access as an alternative to cloning over HTTPS. When fetching source code to build and then run, manual key fingerprint verification seems safer to me than trusting the third party CA system.