2 ms·
That depends. 1. Most platforms these days require a signature with a key issued by the platform. In the browser you have HTTPS but that doesn’t help if the se
by tlrobinson 8y ago
That depends.
1. Most platforms these days require a signature with a key issued by the platform. In the browser you have HTTPS but that doesn’t help if the server is compromised.
2. It’s easier to target individuals (thus evading detection) if you’re serving the code to users directly (which I think is also the case with Chrome, but not Mac App Store, Linux package managers, etc)
3. Some platforms even do some amount of auditing before including software in their repositories.