3 ms·
Crev looks interesting. Most Linux distributions are using a single key for the signing of packages, and this might be an easier place to start changing over t
by bcrl 5y ago
Crev looks interesting.
Most Linux distributions are using a single key for the signing of packages, and this might be an easier place to start changing over to a multiple signature model.
In this particular case is was a single jilted developer, but determined actor could easily attack someone with access to the keys to sign compromised packages, as per the obligatory xkcd on the matter https://xkcd.com/538/ https://xkcd.com/538/ .
- dane-pgp 5y agoMultiple signatures would indeed be a good mitigation against coercion, especially if the signatories were in different jurisdictions. Ideally you'd want a system which separates reputation from meatspace identity, so that well-trusted reviewers couldn't be easily targeted offline. Unfortunately that would require a lot of good opsec, and go against the financial incentive for someone to disclose their online identity as part of a salary negotiation, for example.