4 ms·
What you are looking for is called "remote attestation". (In open source software the solution to this problem is "well, you could always just host your own in
by bugmen0t 10y ago
What you are looking for is called "remote attestation".
(In open source software the solution to this problem is "well, you could always just host your own instance" ;))
- OJFord 10y ago> In open source software the solution to this problem is > "well, you could always just host your own instance" That doesn't always work though - end-users can't trust you more because you host it instead of using the version hosted by the OSS team for whom it's the main focus. (Arguably they should actually trust the latter more!) Consider Keybase for example. If someone builds a service on top of Keybase, their end-users can't trust them with their private keys* if they host it themselves instead of using upstream hosting. *I know this is not required in order to use Keybase - I use it with gnupg and keep my keys local. It's the easiest example of needing to trust Keybase, though.