Post #2176678
2026-04-18 01:54 UTC
@meejah@mastodon.social @slink@fosstodon.org @0xKaishakunin@mastodon.social Separately you then run into the signing problem. And trust around that. Any hot or warm key is always going to have a chance of compromise and beyond that if any single person has direct access to a full copy of the signing key you run the risk of a bad actor signing a bad version. OpenPGP has been the defacto signer for a long time and I don't think that is going to reasonably change anytime soon. This is a problem we've been thinking a lot about with StageX.
Replies (2)
-
@groved@mastodon.social 2026-04-18 01:56
@meejah@mastodon.social @slink@fosstodon.org @0xKaishakunin@mastodon.social With a combination of reproducible builds, hardware backed individual keys and threshold signing policies you can then have better guarantees around this source code == this binary
-
@slink@fosstodon.org 2026-04-18 04:26
@groved@mastodon.social @meejah@mastodon.social @0xKaishakunin@mastodon.social thank you for your input. do you have any open documentation of your processes?