3 ms·
> I trust Alpine Linux, not Alpine Linux's certificate authority. Did you check and sign Alpine's maintainers key yourself or do you rely on the Web of Trust t
by Boulth 8y ago
> I trust Alpine Linux, not Alpine Linux's certificate authority.
Did you check and sign Alpine's maintainers key yourself or do you rely on the Web of Trust to create a path between you two? In the latter case every person in between of you two is acting like a certification authority.
- Sir_Cmpwn 8y agoYes, but all of those authorities are just people. Not hundreds of businesses with ulterior motives. Plus, compromising one WoT PGP key doesn't break the whole system like one compromised CA will.