4 ms·
kinda crazy that the signal team doesn't GPG sign their commits.
by jeffo_rulez 5y ago
kinda crazy that the signal team doesn't GPG sign their commits.
- hda2 5y agoA example of how irrational hate can make smart people do stupid things, unfortunately. Certain people on their team don't like the PGP standard despite the fact that it is mature, standardized, and proven to work well for code signing. When questioned about their reasoning, they'd usually deflect and criticize some aspect of PGP that is irrelevant to code signing at all. In their minds, they believe it is better to rely on git's broken SHA1 fingerprints than to use PGP.