3 ms·
> What if collaboration on opensource projects (i.e. hosting, issues and their comments) was decentralized instead of relying on a central entity like Github? T
by mr_toad 6y ago
> What if collaboration on opensource projects (i.e. hosting, issues and their comments) was decentralized instead of relying on a central entity like Github? That would keep the developer base active and make DMCA takedowns ineffective.
But decentralisation would also make it harder to verify the code is legitimate.
Would you trust a copy of something like this from an anonymous server?
- gitgud 6y agoWell, git commits can be signed by they're authors, verifying authenticity. This would prove if malicious commits have been added to a mirrored repository.
- f1refly 6y agoIf only a cryptographic tool was integrated into git so developers could sign their commits. Man, that'd sure be a neat thing for cases like this where you can't trust the remote. Why hasn't anyone though of this before?