4 ms·

I'm saddened to see you getting downvoted too (and I've tried to compensate for that). You're right that more ecosystems need something like Crev: https://dpc

• bcrl 5y ago
  Crev looks interesting. Most Linux distributions are using a single key for the signing of packages, and this might be an easier place to start changing over to a multiple signature model. In this particular case is was a single jilted developer, but determined actor could easily attack someone with access to the keys to sign compromised packages, as per the obligatory xkcd on the matter https://xkcd.com/538/ https://xkcd.com/538/ .
  • dane-pgp 5y ago
    Multiple signatures would indeed be a good mitigation against coercion, especially if the signatories were in different jurisdictions. Ideally you'd want a system which separates reputation from meatspace identity, so that well-trusted reviewers couldn't be easily targeted offline. Unfortunately that would require a lot of good opsec, and go against the financial incentive for someone to disclose their online identity as part of a salary negotiation, for example.