Having done it both ways - I now much prefer the ssh. If you register your ssh key with github it will "just work" with the git@ addresses. You are secure up to the point where you lose access to your machine or post credentials publicly.