Post #1851113

RE: https://fosstodon.org/@foss_north/116476608857157107 Yay for @dvzrv 's tireless(*) work towards modernizing how OpenPGP is used in distro contexts (including in Arch Linux). I've spent some time last year hacking on https://devblog.archlinux.page/2026/verify-arch-linux-artifacts-using-voa-openpgp/ with David, which was a great time. VOA is the other side of the coin to Signstar - the former verifies signatures, while the latter produces them. --- (*) Although I do suspect he might at times actually get tired, after all 🤔