2025-02-03 19:03 UTC
@homebrew @yossarian is there blog post or content explaining why? Are ssh signed commits more secure or is there any other reason for the switch?
Replies (1)
-
@yossarian@infosec.exchange 2025-02-03 19:48
@jasonkarns @homebrew ssh has a better security track record overall, and gives us a better set of cryptographic primitives/a better overall UX! (The original GPG setup in Homebrew is pretty messy and has caused a lot of problems over the years that SSH avoids.)