Episode 329 - Signing (What is it good for)

<p dir="auto"><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href="https://twitter.com/kurtseifried" rel="nofollow">Kurt</a> talk about what the actual purpose of signing artifacts is. This is one of those spaces where the chain of custody for signing content is a lot more complicated than it sometimes seems to be. Is delivering software over https just as good as using a detached signature? How did we end up here, what do we think the future looks like? This episode will have something for everyone to complain about!</p> <h2 dir="auto">Show Notes</h2> <ul dir="auto"> <li><a href="https://twitter.com/mlbiam/status/1511124632417583108" rel="nofollow">Twitter thread</a></li> <li><a href="https://seifried.org/security/advisories/" rel= "nofollow">Kurt's security advisory page</a></li> <li><a href="https://bugzilla.redhat.com/show_bug.cgi?id=998" rel= "nofollow">Bug 998</a></li> </ul>