4 ms·
> My tarballs and Git tags are always signed with OpenPGP key A key whose public component and fingerprint you serve over unencrypted HTTP too, meaning it does
by HL33tibCe7 5y ago
> My tarballs and Git tags are always signed with OpenPGP key
A key whose public component and fingerprint you serve over unencrypted HTTP too, meaning it doesn’t actually give any extra protection against a MITM.