3 ms·
How would that work? The signature of the official binary would be also valid for the "other" binaries.
by vog 9y ago
How would that work? The signature of the official binary would be also valid for the "other" binaries.
- giancarlostoro 9y agoCode signing involves attaching a certificate from the author which nobody else can reproduce unless a CA is compromised. Think SSL certs to some degree. This only proves identity of person signing it. This would differentiate the binary enough I would think.
- StavrosK 9y agoIf the rest of the binary is bit-for-bit identical, you can just tack the signature on to the OSS binary.