8 ms·
> They could collect the source and vet the updates all kinds of other ways than demanding the author jump through hoops for them, for free. At minimum it's co
by staticassertion 4y ago
> They could collect the source and vet the updates all kinds of other ways than demanding the author jump through hoops for them, for free.
At minimum it's completely unproven that that would be practical, whereas 2FA is trivial and has been widely deployed for decades.
But if you feel strongly about this feel free to make a formal proposal. There are some nascent projects exploring this area that you could draw inspiration from and I'd certainly welcome tooling in that area.
- Brian_K_White 4y agoWhat a weird leap. Now not only the author of some software has to jump through someone else's hoops, I a total bystander also has to? It does not require "feel strongly" to observe the invalidity of some argument. Rather, if you feel so strongly that something should be done, like vet that software, you could do it.
- staticassertion 4y agoYou don't have to do anything?